CVE-2025-2323

Summary

CVE-2025-2323 is a newly disclosed vulnerability affecting the Number of Question Handler component in the springboot-openai-chatgpt e84f6f5 version. The issue, located in the updateQuestionCou function of /api/mjkj-chat/chat/mng/update/questionCou, can be exploited remotely and results in the enforcement of unwanted behavioral workflows. The vendor, who uses a rolling release for continuous delivery, has not yet responded to reports about this vulnerability, and no specific versions or updates have been identified. The exploit for this issue has been made public, increasing the risk for potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.