CVE-2025-0705
MEDIUMbootplus < 2020-08-24 - Open Redirect via QrCodeController qrCode Function
Title source: llmDescription
A vulnerability has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d and classified as problematic. Affected by this vulnerability is the function qrCode of the file src/main/java/io/github/controller/QrCodeController.java. The manipulation of the argument text leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
technical-description
https://vuldb.com/?id.293233
Permissions Required, VDB Entry signature
permissions-required
https://vuldb.com/?ctiid.293233
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.480844
Not Applicable issue-tracking
https://github.com/JoeyBling/bootplus/issues/27
Not Applicable exploit
issue-tracking
https://github.com/JoeyBling/bootplus/issues/27#issue-2786941847
Scores
CVSS v3
4.3
EPSS
0.0035
EPSS Percentile
26.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-601
Status
published
Products (1)
joeybling/bootplus
< 2020-08-24
Published
Jan 24, 2025
Tracked Since
Feb 18, 2026