CVE-2025-13252
Published
CVSS v3
7.3
HIGH
CVSS v2
7.5
HIGH
Affected
1
PROJECT
Description
A vulnerability was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Affected by this issue is some unknown functionality of the component RSA/OAuth2/Database. The manipulation results in hard-coded credentials. The attack can be executed remotely. The exploit has been made public and could be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable.
ModulithShop是Java商城系统,采用Java+Springboot+Vue+Uniapp商城框架的开源电商Java系统(除了java商城外,还开源了go商城及php商城),能满足B2C商城,新零售商城,社交电商Java商城,分销商城,微信小程序商城,B2B商城系统等多种模式Java商城项目。