CVE-2025-7487 | JoeyBling SpringBoot_MyBatisPlus up to a6a825513bd688f717dbae3a196bc9c9622fea26 /file/upload SysFileController portraitFile unrestricted upload (Issue 19)

July 11, 2025 Yanac

A vulnerability, which was classified as critical, was found in JoeyBling SpringBoot_MyBatisPlus up to a6a825513bd688f717dbae3a196bc9c9622fea26. This affects the function SysFileController of the file /file/upload. The manipulation of the argument portraitFile leads to unrestricted upload.

This vulnerability is uniquely identified as CVE-2025-7487. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.VulDB Recent EntriesRead More