CVE-2025-3830 kuangstudy KuangSimpleBBS QuestionController.java fileUpload unrestricted upload

Vulnerability Details

Basic Information

Title CVE-2025-3830 kuangstudy KuangSimpleBBS QuestionController.java fileUpload unrestricted upload
Type vulnrichment
Published 2025-04-20T16:31:04
Last Seen 2025-04-21T02:24:42
CVSS Score 6.3 (MEDIUM)

CVSS v3 Details

Attack Vector NETWORK
Attack Complexity LOW
Privileges Required LOW
User Interaction NONE
Scope UNCHANGED
Confidentiality Impact LOW
Integrity Impact LOW
Availability Impact LOW

CVE Information

CVE IDs CVE-2025-3830
CWE CWE-434, CWE-284
Bulletin Family cve

Description

A vulnerability was found in kuangstudy KuangSimpleBBS 1.0. It has been declared as critical. Affected by this vulnerability is the function fileUpload of the file src/main/java/com/kuang/controller/QuestionController.java. The manipulation of…

Impact Assessment

Base Score 6.3
Severity MEDIUM

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.