Known vulnerabilities in youkefu
Vendor:
zhangyanbo2007
Software:
youkefu
Software CPE:
cpe:2.3:a:zhangyanbo2007:youkefu:*:*:*:*:*:*:*:*
Website:
https://github.com/zhangyanbo2007/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU109805 - Server-Side Request Forgery (SSRF) CVE-2025-2997 |
CWE-918 | High | - | 26.05.2025 |
SB2025052607 |
||
| #VU109804 - Unrestricted Upload of File with Dangerous Type CVE-2025-3381 |
CWE-434 | High | - | 26.05.2025 |
SB2025052607 |
||
| #VU109803 - Unrestricted Upload of File with Dangerous Type CVE-2025-4258 |
CWE-434 | High | - | 26.05.2025 |
SB2025052607 |
||
| #VU109802 - Deserialization of Untrusted Data CVE-2025-4260 |
CWE-502 | High | - | 26.05.2025 |
SB2025052607 |
||
| #VU109801 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2025-3241 |
CWE-611 | Medium | - | 26.05.2025 |
SB2025052607 |