CVE-2025-15449

A vulnerability was determined in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. Affected is the function delete of the file src/main/java/com/macro/mall/controller/MinioController.java. This manipulation of the argument objectName causes path traversal. The attack can be initiated remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-22

• https://github.com/zyhzheng500-maker/cve/blob/main/JavaMall%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%88%A0%E9%99%A4.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.339482Permissions Required, VDB Entry
• https://vuldb.com/?id.339482Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.722000Third Party Advisory, VDB Entry

Published

Jan 5, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15443A vulnerability was identified in CRMEB up to 5.6.1. This is…7.2
• CVE-2025-15444Crypt::Sodium::XS module versions prior to 0.000042, for Per…9.8
• CVE-2025-15445The Restaurant Cafeteria WordPress theme through 0.4.6 expos…5.4
• CVE-2025-15446Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2025-15447Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2025-15448A vulnerability was found in cld378632668 JavaMall up to 994…9.8
• CVE-2025-1545An XPath Injection vulnerability in WatchGuard Fireware OS m…7.5
• CVE-2025-15450A vulnerability was identified in sfturing hosp_order up to …6.3
• CVE-2025-15451A security flaw has been discovered in xnx3 wangmarket up to…4.8
• CVE-2025-15452A weakness has been identified in xnx3 wangmarket up to 4.9.…4.8
• CVE-2025-15453A security vulnerability has been detected in milvus up to 2…6.3
• CVE-2025-15454A vulnerability was detected in zhanglun lettura up to 0.1.2…3.1