CVE-2025-3305

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

A vulnerability has been found in 1902756969/code-projects IKUN_Library 1.0 and classified as problematic. This vulnerability affects the function addInterceptors of the file MvcConfig.java of the component Borrow Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-266CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Apr 5, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-330507.5Protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network.CVE-2025-330517.5Exposure of sensitive information to an unauthorized actor in Microsoft Exchange Server allows an unauthorized attacker to disclose informatCVE-2025-330525.5Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally.CVE-2025-330538.8External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.CVE-2025-330548.1Insufficient UI warning of dangerous operations in Remote Desktop Client allows an unauthorized attacker to perform spoofing over a network.CVE-2025-330555.5Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.CVE-2025-330567.5Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an unauthorized attacker to deny service over a networkCVE-2025-330576.5Null pointer dereference in Windows Local Security Authority (LSA) allows an authorized attacker to deny service over a network.CVE-2025-330585.5Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.CVE-2025-330595.5Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.CVE-2025-33069.8A vulnerability was found in code-projects Blood Bank Management System 1.0 and classified as critical. This issue affects some unknown procCVE-2025-330605.5Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
CVE-2025-3305: Medium severity, CVSS 4.3 | Vulnix