CVE-2025-2323 - CVE House
Back to Database
Status published Medium CVE-2025-2323

274056675 springboot-openai-chatgpt Number of Question questionCou updateQuestionCou behavioral workflow

Vulnerability Description

A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been declared as problematic. This vulnerability affects the function updateQuestionCou of the file /api/mjkj-chat/chat/mng/update/questionCou of the component Number of Question Handler. The manipulation leads to enforcement of behavioral workflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-2323

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • aibot88 (VulDB User)

References

More from 274056675

View All →
CVE-2025-2334
274056675 springboot-openai-chatgpt Chat History chat deleteChat access control
Medium 5.3
CVE-2025-2322
274056675 springboot-openai-chatgpt OpenController.java hard-coded credentials
Medium 6.9
CVE-2025-2321
274056675 springboot-openai-chatgpt addData logic error
Medium 5.3
CVE-2025-2320
274056675 springboot-openai-chatgpt User submit improper authorization
Medium 6.9

Affected Vendor

Affected Software

springboot-openai-chatgpt
Vulnerable Versions:
e84f6f5

Timeline

Official Publish: March 15th, 2025
Last Modified: March 17th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weaknesses (CWE)

CWE-841 CWE-840

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.