Medium severity6.3NVD Advisory· Published Apr 20, 2025· Updated Jun 17, 2026
CVE-2025-3830
CVE-2025-3830
Description
A vulnerability was found in kuangstudy KuangSimpleBBS 1.0. It has been declared as critical. Affected by this vulnerability is the function fileUpload of the file src/main/java/com/kuang/controller/QuestionController.java. The manipulation of the argument editormd-image-file leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
31.0+ 2 more
- (no CPE)range: 1.0
- (no CPE)range: =1.0
- cpe:2.3:a:kuangstudy:kuangsimplebbs:1.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- github.com/caigo8/CVE-md/blob/main/KuangSimpeBBS/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.mdnvdExploit
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.