← All advisories

Critical severity9.8NVD Advisory· Published May 5, 2025· Updated Jun 17, 2026

CVE-2025-45611

CVE-2025-45611

Description

Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Java Aodeng/Hope Boot2 versions
cpe:2.3:a:java-aodeng:hope-boot:1.0.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:java-aodeng:hope-boot:1.0.0:*:*:*:*:*:*:*
- (no CPE)range: =1.0.0
hope-boot/hope-bootdescription

Patches

Vulnerability mechanics

References

1

github.com/java-aodeng/hope-boot/issues/86nvdExploitIssue TrackingVendor Advisory

News mentions

0

No linked articles in our index yet.