Threats affecting pkg:github/yllxx03/java_shop

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.3	EPSS 0.3%	CVE-2024-50652java_shop · A File Upload Medium6.3EPSS 0.3%2024-11-15CVE Database V5CVE-2024-50652 A file upload vulnerability in java_shop 1.0 allows attackers to upload arbitrary files by modifying the avatar function. EPSS 0.3%Vulnerability CWE-434	CVE Database V5	2024-11-15
Medium	6.5	EPSS 0.5%	CVE-2024-50651java_shop · Insecure Direct Object Reference Medium6.5EPSS 0.5%2024-11-15CVE Database V5CVE-2024-50651 java_shop 1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter. EPSS 0.5%Vulnerability CWE-639	CVE Database V5	2024-11-15

Page 1 of 1