Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-13268

Опубликовано: 17 нояб. 2025
Источник: nvd
CVSS3: 6.3
CVSS2: 6.5
EPSS Низкий

Описание

A flaw has been found in Dromara dataCompare up to 1.0.1. The affected element is the function DbConfig of the file src/main/java/com/vince/xq/project/system/dbconfig/service/DbconfigServiceImpl.java of the component JDBC URL Handler. Executing manipulation can lead to injection. The attack can be launched remotely. The exploit has been published and may be used.

EPSS

Процентиль: 19%
0.00061
Низкий

6.3 Medium

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 6.3
github
3 месяца назад

A flaw has been found in Dromara dataCompare up to 1.0.1. The affected element is the function DbConfig of the file src/main/java/com/vince/xq/project/system/dbconfig/service/DbconfigServiceImpl.java of the component JDBC URL Handler. Executing manipulation can lead to injection. The attack can be launched remotely. The exploit has been published and may be used.

EPSS

Процентиль: 19%
0.00061
Низкий

6.3 Medium

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-74