VYPR

ssm-erp

by feng_ha_ha

CVEs (2)

  • CVE-2025-4768MedMay 16, 2025
    risk 0.41cvss 6.3epss 0.00

    A vulnerability classified as critical has been found in feng_ha_ha/megagao ssm-erp and production_ssm 1.0. This affects the function uploadPicture of the file PictureServiceImpl.java. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate…

  • CVE-2025-4333MedMay 6, 2025
    risk 0.41cvss 6.3epss 0.00

    A vulnerability was found in feng_ha_ha/megagao ssm-erp and production_ssm up to 0.0.1. It has been classified as critical. This affects the function uploadFile of the file src/main/java/com/megagao/production/ssm/service/impl/FileServiceImpl.java. The manipulation of the…