CVE-2025-2323

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been declared as problematic. This vulnerability affects the function updateQuestionCou of the file /api/mjkj-chat/chat/mng/update/questionCou of the component Number of Question Handler. The manipulation leads to enforcement of behavioral workflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-840 CWE-841

Affected software

No affected versions have been published.

Timeline

Published: Mar 15, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-232333.5Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated us CVE-2025-232345.5in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow.CVE-2025-232355.5in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through out-of-bounds read.CVE-2025-232368.8Buffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation CVE-2025-232376.6Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE a CVE-2025-232398.7When running in Appliance mode, and logged into a highly-privileged role, an authenticated remote command injection vulnerability exists in CVE-2025-23248.8Improper Privilege Management vulnerability for users configured as Shared Accounts in Progress MOVEit Transfer (SFTP module) allows Privile CVE-2025-232407.8in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. CVE-2025-232417.3Integer overflow or wraparound in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an auth CVE-2025-232429.8NVIDIA Riva contains a vulnerability where a user could cause an improper access control issue. A successful exploit of this vulnerability m CVE-2025-232439.1NVIDIA Riva contains a vulnerability where a user could cause an improper access control issue. A successful exploit of this vulnerability m CVE-2025-232447.8NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successfu