CVE-2025-2320

A vulnerability has been found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this vulnerability is the function submit of the file /api/blade-user/submit of the component User Handler. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-266
• CWE-285

• https://vuldb.com/?ctiid.299749Permissions Required, VDB Entry
• https://vuldb.com/?id.299749Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.505689Third Party Advisory, VDB Entry
• https://www.cnblogs.com/aibot/p/18732226Exploit, Third Party Advisory

Published

Mar 14, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-23194SAP NetWeaver Enterprise Portal OBN does not perform proper …5.3
• CVE-2025-23195An XML External Entity (XXE) vulnerability exists in the Amb…7.5
• CVE-2025-23196A code injection vulnerability exists in the Ambari Alert De…8.8
• CVE-2025-23197matrix-hookshot is a Matrix bot for connecting to external s…6.5
• CVE-2025-23198librenms is a community-based GPL-licensed network monitorin…5.4
• CVE-2025-23199librenms is a community-based GPL-licensed network monitorin…5.4
• CVE-2025-23200librenms is a community-based GPL-licensed network monitorin…5.4
• CVE-2025-23201librenms is a community-based GPL-licensed network monitorin…6.1
• CVE-2025-23202Bible Module is a tool designed for ROBLOX developers to int…10
• CVE-2025-23203Icinga Director is an Icinga config deployment tool. A Secur…5.5
• CVE-2025-23204API Platform Core is a system to create hypermedia-driven RE…4.4
• CVE-2025-23205nbgrader is a system for assigning and grading notebooks. En…6.9