CVE-2025-6731

A vulnerability was found in yzcheng90 X-SpringBoot up to 5.0 and classified as critical. Affected by this issue is the function uploadApk of the file /sys/oss/upload/apk of the component APK File Handler. The manipulation of the argument File leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-22

• https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250616-03.md
• https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250616-03.md#steps-to-reproduce
• https://vuldb.com/?ctiid.314006
• https://vuldb.com/?id.314006
• https://vuldb.com/?submit.597524
• https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250616-03.md
• https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250616-03.md#steps-to-reproduce

Published

Jun 26, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-67291A stored cross-site scripting (XSS) vulnerability in the Med…6.1
• CVE-2025-67298An issue in ClasroomIO before v.0.2.6 allows a remote attack…8.1
• CVE-2025-6730The Bonanza – WooCommerce Free Gifts Lite plugin for WordPre…4.3
• CVE-2025-67303An issue in ComfyUI-Manager prior to version 3.38 allowed re…7.5
• CVE-2025-67304In Ruckus Network Director (RND) < 4.5.0.54, the OVA applian…9.8
• CVE-2025-67305In RUCKUS Network Director (RND) < 4.5.0.56, the OVA applian…9.8
• CVE-2025-67315Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: non…
• CVE-2025-67316An issue in realme Internet browser v.45.13.4.1 allows a rem…5.4
• CVE-2025-6732A vulnerability was found in UTT HiPER 840G up to 3.1.1-1903…8.8
• CVE-2025-67325Unrestricted file upload in the hotel review feature in QloA…9.8
• CVE-2025-6733A vulnerability was found in UTT HiPER 840G up to 3.1.1-1903…8.8
• CVE-2025-6734A vulnerability was found in UTT HiPER 840G up to 3.1.1-1903…8.8