CVE-2025-3305
1902756969/code-projects IKUN_Library Borrow MvcConfig.java addInterceptors access control
- State
- Published
- Severity
- 5.3 Medium
- Published
- Apr 5, 2025
- Updated
- Apr 7, 2025
- Reserved
- Apr 5, 2025
Description
A vulnerability has been found in 1902756969/code-projects IKUN_Library 1.0 and classified as problematic. This vulnerability affects the function addInterceptors of the file MvcConfig.java of the component Borrow Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N | VulDB |
| 3.0 | 4.3 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N | VulDB |
| 2.0 | 4.0 Medium | AV:N/AC:L/Au:S/C:N/I:P/A:N | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
IKUN_Library1902756969 |
|
IKUN_Librarycode-projects |
|
References
- VDB-303502 | 1902756969/code-projects IKUN_Library Borrow MvcConfig.java addInterceptors access controlvdb-entrytechnical-description
- VDB-303502 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #550186 | code-projects IKUN_Library v1.0 Access Controlthird-party-advisory
- https://github.com/buluorifu/Vulnerability-recurrence/blob/main/Refer/IKUN_Library-authority.mdexploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.