Threats tagged 'ghsa-gch3-g2qp-mcxw'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.5%	CVE-2025-7939jerryshensjf JPACookieShop 蛋糕商城JPA版 · Improper Access Control Medium5.3EPSS 0.5%2025-07-21GCVE DatabaseCVE-2025-7939 A critical vulnerability exists in jerryshensjf JPACookieShop 蛋糕商城JPA版 1.0, specifically in the addGoods function of GoodsController.java. This flaw allows unrestricted file upload, which can be exploited remotely. The vulnerability has a CVSS score of 6.3, indicating medium severity. EPSS 0.5%Report on CVE-2025-7939 Vulnerability CWE-284 #ghsa-gch3-g2qp-mcxw	GCVE Database	2025-07-21

Page 1 of 1