Springbootmovie Project Springbootmovie
2 CVEs affecting Springbootmovie Project Springbootmovie. Latest disclosed: 2022-05-03. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-29001 | High | 7.2 | 2022-05-03 | In SpringBootMovie <=1.2, the uploaded file suffix parameter is not filtered, resulting in arbitrary file upload vulnerability |
CVE-2022-28588 | Medium | 5.4 | 2022-05-03 | In SpringBootMovie <=1.2 when adding movie names, malicious code can be stored because there are no filtering parameters, resulting in stored XSS. |