THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-13805 (LOW 3.7) — A weakness has been identified in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This affects the function getInputStream of the file nutzcloud/nutzcloud-literpc/src/main/java/org/nutz/boot/starter/literpc/impl/endpoint/http/HttpServletRpcEndpoint.java of the component LiteRpc-Serializer.

[NVD] CVE-2025-13805 (LOW 3.7) — A weakness has been identified in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This affects the function getInputStream of the file nutzcloud/nutzcloud-literpc/src/main/java/org/nutz/boot/starter/literpc/impl/endpoint/http/HttpServletRpcEndpoint.java of the component LiteRpc-Serializer.

lownvdPublished 2025-12-01

CVE-2025-13805 CVSS: 3.7 LOW Published: 2025-12-01T04:16:05.643

A weakness has been identified in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This affects the function getInputStream of the file nutzcloud/nutzcloud-literpc/src/main/java/org/nutz/boot/starter/literpc/impl/endpoint/http/HttpServletRpcEndpoint.java of the component LiteRpc-Serializer. Executing a manipulation can lead to deserialization.

Indicators of compromise

CVE-2025-13805cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-13805