CVE-2025-3305
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 5, 2025
Updated: Apr 8, 2025
CWE ID 284
CWE ID 266
Summary
CVE-2025-3305 is a newly identified vulnerability affecting the IKUN_Library 1.0 component, specifically the MvcConfig.java file in the Borrow Handler's addInterceptors function. This issue allows for improper access controls, enabling remote attackers to manipulate the system. The vulnerability has been disclosed publicly, increasing the risk of potential exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.