CVE-2025-2211

Summary

CVE-2025-2211 is a newly disclosed vulnerability affecting the aitangbao springboot-manager version 3.0. This issue is classified as a Cross-Site Scripting (XSS) vulnerability. The vulnerability lies in the unknown functionality of the file /sysDictDetail/add, making it possible to manipulate the argument name, leading to XSS attacks. These attacks can be launched remotely, and other parameters might also be affected. The exploit has been made public, increasing the risk for potential attacks. Despite early disclosure to the vendor, no response has been received from them regarding this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.