Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2025-4533

Date: May 11, 2025

A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0. This vulnerability affects the function unzipFile of the file /jeecg-boot/airag/knowledge/doc/import/zip of the component Document Library Upload. The manipulation of the argument File leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Severity Score

Related Resources (8)

https://github.com/jeecgboot/JeecgBoot/issues/8199
https://github.com/jeecgboot/JeecgBoot/issues/8199#issuecomment-2834691016
https://vuldb.com/?ctiid.308278
https://github.com/jeecgboot/JeecgBoot/issues/8199#issue-3022937633
https://vuldb.com/?id.308278
https://nvd.nist.gov/vuln/detail/CVE-2025-4533
https://vuldb.com/?submit.566192
https://www.mend.io/vulnerability-database/CVE-2025-4533

Severity Score

Weakness Type (CWE)

Improper Resource Shutdown or Release

CWE-404

Uncontrolled Resource Consumption

CWE-400

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): HIGH
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): LOW

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): MULTIPLE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us