CNNVD-202512-4865 Information
CNNVD ID
CNNVD-202512-4865
Related CVE
- CNNVD Published: 2025-12-28
Description (Chinese)
moga-mall是h-moses个人开发者的一个基于微服务架构的电商平台。 moga-mall 392d631a5ef15962a9bddeeb9f1269b9085473fa及之前版本存在代码问题漏洞，该漏洞源于文件src/main/java/com/ms/product/controller/PmsProductController.java中函数addProduct对参数objectName的错误操作，可能导致无限制上传。
Description (English)
Moga-mall is an electrician platform based on microservice architecture for the H-mos personal developers. Moga-mall 392d631a5ef15962a9bddeeb9f1269b9085473fa and previous versions have a code problem loophole, which stems from the error of the addProdutct to parameter object name in document src/main/java/com/ms/product/controller/PmsProdutController.java, which may lead to unrestricted uploading.
Hazard Level
High
Vulnerability Type
代码问题
Affected Vendor
个人开发者
Published
2025-12-28
Last Modified
2026-02-24
References
https://vuldb.com/?submit.721988 https://github.com/zyhzheng500-maker/cve/blob/main/moga-mall%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md https://vuldb.com/?id.338529 https://vuldb.com/?ctiid.338529 https://access.redhat.com/security/cve/cve-2025-15152
Share on: