Approved changes feed: RSS · Atom

cpe:2.3:a:yxj2018:springboot-vue-onlineexam:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorYxj2018 (e2d5b091-7328-5326-9548-a1e5333bcd17)
ProductSpringboot Vue Onlineexam (e927b263-1fc8-5e58-ad4f-a6298605e9dd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/yxj2018/springboot-vue-onlineexam purl2cpe 2026-06-01 10:17:18.148461

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3850 vulnerable 2026-06-08 07:23:10.022833 YXJ2018 SpringBoot-Vue-OnlineExam API improper authentication
LOW (3.7)
A vulnerability, which was classified as problematic, has been found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This issue affects some unknown processing of the component API. The manipulation leads to improper authentication. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.
Published: 2025-04-22T00:00:12.706Z
Updated: 2025-04-22T02:06:11.274Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3849 vulnerable 2026-06-08 07:23:10.022260 YXJ2018 SpringBoot-Vue-OnlineExam studentPWD unverified password change
MEDIUM (4.3)
A vulnerability classified as problematic was found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This vulnerability affects unknown code of the file /api/studentPWD. The manipulation of the argument studentId leads to unverified password change. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-21T23:31:04.814Z
Updated: 2025-04-22T02:10:06.371Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.