Description
A vulnerability was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 1.0 and classified as critical. This issue affects the function updateGoods of the file GoodsController.java. The manipulation leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-21
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-22176 A vulnerability was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 1.0 and classified as critical. This issue affects the function updateGoods of the file GoodsController.java. The manipulation leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
History

Thu, 06 Nov 2025 16:15:00 +0000

Type Values Removed Values Added
First Time appeared Jerryshensjf
Jerryshensjf jpacookieshop
CPEs cpe:2.3:a:jerryshensjf:jpacookieshop:-:*:*:*:*:*:*:*
Vendors & Products Jerryshensjf
Jerryshensjf jpacookieshop

Tue, 22 Jul 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 21 Jul 2025 20:15:00 +0000

Type Values Removed Values Added
Description A vulnerability was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 1.0 and classified as critical. This issue affects the function updateGoods of the file GoodsController.java. The manipulation leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Title jerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsController.java updateGoods authorization
Weaknesses CWE-285
CWE-639
References
Metrics cvssV2_0

{'score': 4, 'vector': 'AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 4.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Jerryshensjf Jpacookieshop
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2025-07-22T16:04:37.544Z

Reserved: 2025-07-21T07:13:44.028Z

Link: CVE-2025-7938

cve-icon Vulnrichment

Updated: 2025-07-22T16:04:34.401Z

cve-icon NVD

Status : Analyzed

Published: 2025-07-21T20:15:56.803

Modified: 2025-11-06T16:12:01.390

Link: CVE-2025-7938

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses