zhangyanbo2007 youkefu
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-4260 | 4.0 ; 4.1 ; 4.2.0 | zhangyanbo2007 youkefu TemplateController.java impsave deserialization | MEDIUM 5.3 | 0.7 % | ||
| CVE-2025-4258 | 4.0 ; 4.1 ; 4.2.0 | zhangyanbo2007 youkefu MediaController.java upload unrestricted upload | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-3381 | 4.2.0 | zhangyanbo2007 youkefu File Upload WebIMController.java path traversal | MEDIUM 5.3 | 1.1 % | ||
| CVE-2025-3241 | 4.0 ; 4.1 ; 4.2 | zhangyanbo2007 youkefu XML Document CallCenterRouterController.java xml external entity reference | MEDIUM 5.3 | 0.7 % | ||
| CVE-2025-2997 | 4.2.0 | zhangyanbo2007 youkefu url server-side request forgery | MEDIUM 5.3 | 0.5 % |