CVE-2025-2322 MEDIUM

CVE-2025-2322: 274056675 springboot-openai-chatgpt OpenController.java hard-coded credentials

Vendor 274056675
Product springboot-openai-chatgpt
Weakness CWE-798 · Hardcoded credentials
Published March 15, 2025
Last update March 18, 2025

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

Description

A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been classified as critical. This affects an unknown part of the file /chatgpt-boot/src/main/java/org/springblade/modules/mjkj/controller/OpenController.java. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.

Key dates

Disclosure timeline

March 15, 2025 CVE published
March 18, 2025 Record updated