CVE-2025-14965CWE-22

1541492390c yougou-mall ResourceController.java delete path traversal

Medium · published December 19, 2025

CVSS v4.0
5.1
EPSS
0%
Percentile
22.4
In the wild
Unconfirmed
What it is

A vulnerability was found in 1541492390c yougou-mall up to 0a771fa817c924efe52c8fe0a9a6658eee675f9f. This impacts the function upload/delete of the file src/main/java/per/ccm/ygmall/extra/controller/ResourceController.java. Performing manipulation results in path traversal. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
EPSS
0.00308 · 22.4th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2025-12-19T19:02Z
EPSS history
Timeline
  • 19 DEC 19:02Z
    1541492390c yougou-mall ResourceController.java delete path traversal
    cvelistv5