Vulnerability Description
A vulnerability was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 1.0. It has been classified as critical. Affected is the function addGoods of the file GoodsController.java. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Jerryshensjf | Jpacookieshop | - |
Related Weaknesses (CWE)
References
- https://github.com/Bemcliu/cve-reports/blob/main/cve-03-%E8%9B%8B%E7%B3%95%E5%95ExploitThird Party Advisory
- https://vuldb.com/?ctiid.317076Permissions RequiredVDB Entry
- https://vuldb.com/?id.317076Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.618986Third Party AdvisoryVDB Entry
FAQ
What is CVE-2025-7939?
CVE-2025-7939 is a vulnerability with a CVSS score of 6.3 (MEDIUM). A vulnerability was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 1.0. It has been classified as critical. Affected is the function addGoods of the file GoodsController.java. The manipulation leads to ...
How severe is CVE-2025-7939?
CVE-2025-7939 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-7939?
Check the references section above for vendor advisories and patch information. Affected products include: Jerryshensjf Jpacookieshop.