CVE-2025-3830

A vulnerability was found in kuangstudy KuangSimpleBBS 1.0. It has been declared as critical. Affected by this vulnerability is the function fileUpload of the file src/main/java/com/kuang/controller/QuestionController.java. The manipulation of the argument editormd-image-file leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

• CWE-284
• CWE-434
• CWE-434

• https://github.com/caigo8/CVE-md/blob/main/KuangSimpeBBS/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.mdExploit
• https://vuldb.com/?ctiid.305737Permissions Required, VDB Entry
• https://vuldb.com/?id.305737Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.556133Third Party Advisory, VDB Entry

Published

Apr 20, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-38294In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38295In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38296In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38297In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38298In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38299In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38300In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38301In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38302In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38303In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38304In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38305In the Linux kernel, the following vulnerability has been re…5.5