CVE-2025-2323
274056675 springboot-openai-chatgpt Number of Question questionCou updateQuestionCou behavioral workflow
- State
- Published
- Severity
- 5.3 Medium
- Published
- Mar 15, 2025
- Updated
- Mar 17, 2025
- Reserved
- Mar 14, 2025
Description
A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been declared as problematic. This vulnerability affects the function updateQuestionCou of the file /api/mjkj-chat/chat/mng/update/questionCou of the component Number of Question Handler. The manipulation leads to enforcement of behavioral workflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N | VulDB |
| 3.0 | 4.3 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N | VulDB |
| 2.0 | 4.0 Medium | AV:N/AC:L/Au:S/C:N/I:P/A:N | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
springboot-openai-chatgpt274056675 |
|
References
- VDB-299752 | 274056675 springboot-openai-chatgpt Number of Question questionCou updateQuestionCou behavioral workflowvdb-entrytechnical-description
- VDB-299752 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- Submit #505695 | 274056675 springboot-openai-chatgpt No version commitID e84f6f5 Business Logic Errorsthird-party-advisory
- https://www.cnblogs.com/aibot/p/18732309broken-linkexploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.