CNNVD-202512-687 Information

CNNVD ID

CNNVD-202512-687

CVE-2025-14085

  • CNNVD Published: 2025-12-05

Description (Chinese)

youlai-mall是youlaitech开源的一个全栈商城系统。 youlai-mall 1.0.0版本和2.0.0版本存在安全漏洞,该漏洞源于动态变量控制不当,可能导致远程攻击。

Description (English)

Youlai-mall is an all-storey mall system from the open source of youlaitech. There is a security loophole in versions 1.0.0 and 2.0.0 of youlai-mall, which stems from inadequate control of dynamic variables, which can lead to long-range attacks.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

youlaitech

Published

2025-12-05

Last Modified

2026-02-24

References

https://vuldb.com/?submit.695943 https://vuldb.com/?ctiid.334476 https://github.com/Hwwg/cve/issues/23 https://vuldb.com/?id.334476 https://access.redhat.com/security/cve/cve-2025-14085

Share on: