A vulnerability was determined in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. Affected is the function delete of the file src/main/java/com/macro/mall/controller/MinioController.java. This manipulation of the argument objectName causes path traversal. The attack can be initiated remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://github.com/zyhzheng500-maker/cve/blob/main/JavaMall%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%88%A0%E9%99%A4.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.339482 | Permissions Required VDB Entry |
| https://vuldb.com/?id.339482 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.722000 | Third Party Advisory VDB Entry |
Configurations
History
08 Mar 2026, 01:41
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:cld378632668:javamall:1.0.0:*:*:*:*:*:*:* | |
| First Time |
Cld378632668
Cld378632668 javamall |
|
| References | () https://github.com/zyhzheng500-maker/cve/blob/main/JavaMall%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%88%A0%E9%99%A4.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.339482 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.339482 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.722000 - Third Party Advisory, VDB Entry |
05 Jan 2026, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-05 01:15
Updated : 2026-03-08 01:41
NVD link : CVE-2025-15449
Mitre link : CVE-2025-15449
CVE.ORG link : CVE-2025-15449
JSON object : View
Products Affected
cld378632668
- javamall
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')