CVE-2025-2322

Summary

CVE-2025-2322 is a newly disclosed critical vulnerability affecting the springboot-openai-chatgpt package, specifically the OpenController.java file located in /chatgpt-boot/src/main/java/org/springblade/modules/mjkj/controller. This issue involves hard-coded credentials, making it exploitable remotely. The vendor, 274056675, has not responded to the disclosure, and no information is available about which versions of the product are affected or unaffected. The exploit for this vulnerability has been made public, increasing the risk of potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.