PT-2025-15313 · Unknown · Mrcen Springboot-Ucan-Admin

Published 2025-04-08 · Updated 2025-04-08 · CVE-2025-3393

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: mrcen springboot-ucan-admin up to 5f35162032cbe9288a04e429ef35301545143509

Description: A vulnerability was found in the Personal Settings Interface component of mrcen springboot-ucan-admin, affecting an unknown part of the file /ucan-admin/index. The manipulation leads to cross-site scripting and can be initiated remotely. The issue has been disclosed to the public.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-3393

Affected Products

Mrcen Springboot-Ucan-Admin

References · 8

• 🔥 https://gitee.com/mrcen/springboot-ucan-admin/issues/IBT2W5 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-3393 · Security Note
• https://twitter.com/CVEnew/status/1909436580575821860 · Twitter Post
• https://t.me/cvedetector/22374 · Telegram Post
• https://vuldb.com/?ctiid.303639 · Note
• https://twitter.com/VulmonFeeds/status/1909451156885012734 · Twitter Post
• https://vuldb.com/?id.303639 · Note
• https://t.me/cvetracker/21064 · Telegram Post