CVE-2025-4511

vector4wang spring-boot-quick quick-img2txt Img2TxtController.java ResponseEntity path traversal

CVSS 5.3 MEDIUMEPSS 0.4%CWE-22

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 5.3EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

10 May 2025Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A vulnerability was found in vector4wang spring-boot-quick up to 20250422. It has been rated as critical. This issue affects the function ResponseEntity of the file /spring-boot-quick-master/quick-img2txt/src/main/java/com/quick/controller/Img2TxtController.java of the component quick-img2txt. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected products

vector4wang · spring-boot-quick

References

https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250422-01.md https://vuldb.com/?ctiid.308231 https://vuldb.com/?id.308231 https://vuldb.com/?submit.563538