CVE-2025-6509

A vulnerability was found in seaswalker spring-analysis up to 4379cce848af96997a9d7ef91d594aa129be8d71. It has been declared as problematic. Affected by this vulnerability is the function echo of the file /src/main/java/controller/SimpleController.java. The manipulation of the argument Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.

• CWE-79
• CWE-94

• https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250609-01/report.md
• https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250609-01/report.md#steps-to-reproduce
• https://vuldb.com/?ctiid.313621
• https://vuldb.com/?id.313621
• https://vuldb.com/?submit.592962

Published

Jun 23, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-65084An Out-of-Bounds Write vulnerability is present in Ashlar-Ve…9.8
• CVE-2025-65085A Heap-based Buffer Overflow vulnerability is present in Ash…9.8
• CVE-2025-65086An Out-of-Bounds Write vulnerability is present in Ashlar-Ve…7.8
• CVE-2025-65087An Out-of-Bounds Read vulnerability is present in Ashlar-Vel…7.8
• CVE-2025-65088An Out-of-Bounds Read vulnerability is present in Ashlar-Vel…7.8
• CVE-2025-65089XWiki Remote Macros provides XWiki rendering macros that are…6.5
• CVE-2025-65090XWiki Full Calendar Macro displays objects from the wiki on …5.3
• CVE-2025-65091XWiki Full Calendar Macro displays objects from the wiki on …10
• CVE-2025-65092ESF-IDF is the Espressif Internet of Things (IOT) Developmen…6.9
• CVE-2025-65093LibreNMS is an auto-discovering PHP/MySQL/SNMP based network…5.5
• CVE-2025-65094WBCE CMS is a content management system. Prior to version 1.…8.8
• CVE-2025-65095Lookyloo is a web interface that allows users to capture a w…9.4