CVE-2025-0702

Summary

CVE-2025-0702 is a newly disclosed critical vulnerability affecting the JoeyBling bootplus software up to the version 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. The issue resides in the SysFileController.java file of unknown code, allowing for unrestricted file uploads through the manipulation of the portraitFile argument. This vulnerability can be exploited remotely, and the public disclosure of the exploit increases the risk. Continuous delivery with rolling releases is employed by this product, leaving no clear indication of affected or updated versions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.