Approved changes feed: RSS · Atom

cpe:2.3:a:joeybling:springboot_mybatisplus:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJoeybling (c60f3fd1-cf5e-554b-8768-dd05c52017d5)
ProductSpringboot Mybatisplus (0088996a-5794-5e13-abb1-037df5b7d41c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7488 vulnerable 2026-06-08 07:45:17.507617 JoeyBling SpringBoot_MyBatisPlus download path traversal
MEDIUM (4.3)
A vulnerability has been found in JoeyBling SpringBoot_MyBatisPlus up to a6a825513bd688f717dbae3a196bc9c9622fea26 and classified as critical. This vulnerability affects the function Download of the file /file/download. The manipulation of the argument Name leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.
Published: 2025-07-12T19:32:05.595Z
Updated: 2025-07-14T16:11:26.282Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7487 vulnerable 2026-06-08 07:45:17.506913 JoeyBling SpringBoot_MyBatisPlus upload SysFileController unrestricted upload
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in JoeyBling SpringBoot_MyBatisPlus up to a6a825513bd688f717dbae3a196bc9c9622fea26. This affects the function SysFileController of the file /file/upload. The manipulation of the argument portraitFile leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.
Published: 2025-07-12T19:02:05.776Z
Updated: 2025-07-14T16:11:57.435Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.