CVE-2025-2210

CVSS 2.0 Score 3.3 of 10 (low)

Details

Published Mar 11, 2025
Updated: Mar 12, 2025
CWE ID 94
CWE ID 79

Summary

CVE-2025-2210 is a newly discovered vulnerability affecting the aitangbao springboot-manager version 3.0. This issue is classified as problematic, as an unknown functionality of the /sysJob/add file is susceptible to cross-site scripting (XSS) attacks. The manipulation of argument names in this file can lead to remote code injection. Although the vendor was notified of the disclosure, they have yet to respond or provide a patch. Other parameters may also be affected, making this a significant security risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share