CVE-2025-4019: 20120630 Novel-Plus GeneratorController.java genCode missing authentication
A vulnerability, which was classified as critical, was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. Affected is the function genCode of the file novel-admin/src/main/java/com/java2nb/common/controller/GeneratorController.java. The manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4019?
CVE-2025-4019 is classified as a critical vulnerability.
What software is affected by CVE-2025-4019?
CVE-2025-4019 affects Novel-Plus up to version 0e156c04b4b7ce0563bef6c97af4476fcda8f160.
How do I fix CVE-2025-4019?
To mitigate CVE-2025-4019, you should upgrade to a version of Novel-Plus that is not affected.
What type of vulnerability is CVE-2025-4019?
CVE-2025-4019 is a function manipulation vulnerability found in the genCode function.
What impact does CVE-2025-4019 have?
The manipulation caused by CVE-2025-4019 can lead to severe security risks in affected systems.