CVE-2025-3413

A vulnerability has been found in opplus springboot-admin up to a2d5310f44fd46780a8686456cf2f9001ab8f024 and classified as critical. Affected by this vulnerability is the function code of the file SysGeneratorController.java. The manipulation of the argument Tables leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-20
• CWE-502

• https://github.com/mapl3miss/Vul/blob/main/Vul.mdBroken Link
• https://vuldb.com/?ctiid.303691Permissions Required, VDB Entry
• https://vuldb.com/?id.303691Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.545374Third Party Advisory, VDB Entry
• https://github.com/mapl3miss/Vul/blob/main/Vul.mdBroken Link

Published

Apr 8, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-34124A buffer overflow vulnerability exists in Heroes of Might an…8.4
• CVE-2025-34125An unauthenticated command injection vulnerability exists in…9.3
• CVE-2025-34126A path traversal vulnerability exists in RIPS Scanner versio…8.7
• CVE-2025-34127A stack-based buffer overflow exists in Achat v0.150 in its …9.3
• CVE-2025-34128A buffer overflow vulnerability exists in the X360 VideoPlay…8.6
• CVE-2025-34129A command injection vulnerability exists in LILIN Digital Vi…8.7
• CVE-2025-34130An unauthenticated arbitrary file read exists in LILIN Digit…8.7
• CVE-2025-34131Rejected reason: This CVE ID was rejected because it was res…
• CVE-2025-34132A command injection vulnerability exists in LILIN Digital Vi…9.3
• CVE-2025-34133Wimi Teamwork versions prior to 7.38.17 contains a cross-sit…7
• CVE-2025-34134Nagios XI versions prior to 2024R1.4.2 contain a remote code…7.2
• CVE-2025-34135Nagios XI versions prior to 2024R1.4.2 configure some system…4.4