CVE-2025-4511

vector4wang spring-boot-quick quick-img2txt Img2TxtController.java ResponseEntity path traversal

CVSS 5.3 MEDIUMEPSS 0.4%CWE-22

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 5.3EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

10 mai 2025Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A vulnerability was found in vector4wang spring-boot-quick up to 20250422. It has been rated as critical. This issue affects the function ResponseEntity of the file /spring-boot-quick-master/quick-img2txt/src/main/java/com/quick/controller/Img2TxtController.java of the component quick-img2txt. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Produtos afetados

vector4wang · spring-boot-quick

Referências

https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250422-01.md https://vuldb.com/?ctiid.308231 https://vuldb.com/?id.308231 https://vuldb.com/?submit.563538