CVE-2025-12305: quequnlong shiyi-blog Job SysJobController.java deserialization
A vulnerability was found in quequnlong shiyi-blog up to 1.2.1. This impacts an unknown function of the file src/main/java/com/mojian/controller/SysJobController.java of the component Job Handler. The manipulation results in deserialization. The attack can be executed remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12305?
CVE-2025-12305 has a critical severity rating due to its potential for remote exploitation through deserialization.
How do I fix CVE-2025-12305?
To fix CVE-2025-12305, upgrade to a version of shiyi-blog that is later than 1.2.1 to eliminate the vulnerability.
What type of vulnerability is CVE-2025-12305?
CVE-2025-12305 is a deserialization vulnerability affecting the Job Handler component in quequnlong shiyi-blog.
Can CVE-2025-12305 be exploited remotely?
Yes, CVE-2025-12305 can be exploited remotely, allowing attackers to manipulate the affected software function.
What is the affected component in CVE-2025-12305?
The affected component in CVE-2025-12305 is the Job Handler, specifically located in src/main/java/com/mojian/controller/SysJobController.java.