CVE-2025-2323

4.3 MEDIUM
Published: March 15, 2025 Modified: October 24, 2025

Description

A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been declared as problematic. This vulnerability affects the function updateQuestionCou of the file /api/mjkj-chat/chat/mng/update/questionCou of the component Number of Question Handler. The manipulation leads to enforcement of behavioral workflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
https://vuldb.com/?ctiid.299752
Source: cna@vuldb.com
Permissions Required VDB Entry
https://vuldb.com/?id.299752
Source: cna@vuldb.com
Third Party Advisory VDB Entry
https://vuldb.com/?submit.505695
Source: cna@vuldb.com
Third Party Advisory VDB Entry
https://www.cnblogs.com/aibot/p/18732309
Source: cna@vuldb.com
Exploit Third Party Advisory

4 reference(s) from NVD

Quick Stats

CVSS v3 Score
4.3 / 10.0
EPSS (Exploit Probability)
0.1%
27th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

274056675