CVE-2025-34336

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-34336
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-34336.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-34336
Published
2025-11-19T16:20:26Z
Modified
2026-10-28T10:45:27Z
Severity
  • 6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N CVSS Calculator
Summary
eGovFramework <= 4.3.1 Unauthenticated File Upload via Web Editor Image Upload Endpoints
Details

eGovFramework/egovframe-common-components versions up to and including 4.3.1 contain an unauthenticated file upload vulnerability via the /utl/wed/insertImage.do and /utl/wed/insertImageCk.do image upload endpoints. These controllers accept multipart requests without authentication, pass the uploaded content to a shared upload helper, and store the file on the server under a framework-controlled path. The framework then returns a download URL that can be used to retrieve the uploaded content, including an attacker-controlled Content-Type within the limits of the image upload functionality. While a filename extension whitelist is enforced, the attacker fully controls the file contents. The response MIME type used is also attacker-controlled when the file is served up to version < 4.1.2. Since version 4.1.2, it is possible to download any image uploaded with any whitelisted content type. But any file uploaded other than an image will be served with the application/octet-stream content type (the content type is no longer controlled by the attacker since version 4.1.2). This enables an unauthenticated attacker to use any affected application as a persistent file hosting service for arbitrary content under the application's origin. KISA/KrCERT has identified this unpatched vulnerability as "KVE-2023-5280."

Database specific 
{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-434"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/34xxx/CVE-2025-34336.json"
}
References

Affected packages

Git / github.com/egovframework/egovframe-common-components

Affected ranges

Type
GIT
Repo
https://github.com/egovframework/egovframe-common-components
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
d949e4002a6298f01a6e3e765a63e7dd636ad6ae
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "4.3.1"
                }
            ],
            "source":  "DESCRIPTION"
        },
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "4.1.2"
                }
            ],
            "source":  "DESCRIPTION"
        }
    ]
}

Affected versions

v3.*
v3.10.0
v3.10.0-FINAL
v3.10.0-beta
v3.9.0
v4.*
v4.0.0
v4.1.0
v4.1.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-34336.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "151938732539085733918266327355177161152",
                "226271246986540785839112591737942344835",
                "248636936857593583263380506751465657404",
                "221845422738654511467511097582594335044",
                "87385071885854845883802176039714986649",
                "327446139174534303832635662315996573436",
                "226925701166338252617980881460895229999",
                "246860528678683843719775293586932835493",
                "292308619079975617213212233373625580294"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2025-34336-0d3841cd",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/sym/mnu/mcm/service/impl/EgovMenuCreateManageServiceImpl.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "79492450819638055473753034898855110241",
                "59799883500259163248399157852340981642",
                "75297917875904206856677050398940691900",
                "11146668951643448333661142705016479520",
                "317187657148700512535220771508900602060",
                "54580799874876362657268397647219857376",
                "50946311408662856475362680563228851421"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2025-34336-203e1cf0",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/utl/sim/service/EgovNetworkState.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "253689747219117339270419106252191241319",
                "145113995428516605068967029565735144731",
                "265424671108978007896265333690136608941",
                "186090668591149683513197872369526512181",
                "178542840669446492566636617902420454093",
                "192437321145046995624947425055883786880",
                "63401535566794941627754171119423685753",
                "153180429338019037187111403341944480521",
                "194332577447182044584820200041515828829"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2025-34336-2679bb2b",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/uat/uia/web/EgovLoginController.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "76759102326214680223424480114025513456",
            "length":  715
        },
        "id":  "CVE-2025-34336-4cc59ebe",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/sym/mnu/mcm/service/impl/EgovMenuCreateManageServiceImpl.java",
            "function":  "creatSiteMap"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "167555535091644442951393367089935228359",
            "length":  695
        },
        "id":  "CVE-2025-34336-509adabc",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/sym/mnu/mcm/service/impl/EgovMenuCreateManageServiceImpl.java",
            "function":  "siteMapCreat"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "84389547205448380543551483377337861775",
            "length":  462
        },
        "id":  "CVE-2025-34336-52f93d99",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/uss/ion/isg/web/EgovIntnetSvcGuidanceController.java",
            "function":  "selectIntnetSvcGuidanceResult"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "177369812911888261528155123515420700285",
            "length":  433
        },
        "id":  "CVE-2025-34336-577a6db5",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/utl/sys/fsm/web/EgovFileSysMntrngController.java",
            "function":  "selectFileSysMg"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "119592210139025803052331322947749308409",
            "length":  916
        },
        "id":  "CVE-2025-34336-583a0565",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/utl/fcc/service/EgovFormBasedFileUtil.java",
            "function":  "viewFile"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "52861339266042488394534248996555965730",
            "length":  1505
        },
        "id":  "CVE-2025-34336-58f84dcc",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/ext/msg/server/UsersServerEndPoint.java",
            "function":  "handleMessage"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "116406501657901053382104576530549931197",
            "length":  564
        },
        "id":  "CVE-2025-34336-60afd1e4",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/ext/msg/server/model/decoder/MessageDecoder.java",
            "function":  "decode"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "27438046923278252578975061402970181253",
                "7525222649327476151800865279108821152",
                "218967585511669619288163406470506854761",
                "317489787092348677658862708549012290868"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2025-34336-63e7a5d3",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/sym/mnu/stm/service/impl/EgovSiteMapngServiceImpl.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "252981923572012371009899614691479401192",
            "length":  210
        },
        "id":  "CVE-2025-34336-64b0a607",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/sym/mnu/stm/service/impl/EgovSiteMapngServiceImpl.java",
            "function":  "selectSiteMapng"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "220188681076656805111652529213659826390",
                "300666590801643572132306845816040384146",
                "252103625916678658500716189079727599928",
                "94321520148204033205351959835398291862",
                "72198489266326598989104779558227737521",
                "271396871431982441645849826291859748650",
                "265965690672299745523437838037265538953"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2025-34336-666ec7c3",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/utl/wed/filter/CkImageSaver.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "22798489369357854328758252182568766323",
                "2861259681220976621234589108310702870",
                "122756865786229861775099890778446240714",
                "291056564986056949118682150804645680383",
                "223350774525228430348619167446649487470",
                "109655580763825400234750545155176660710",
                "259622215150696355902730550354173695642",
                "79472149596699325403932122296681377947",
                "288438709725485462046921442534941058216",
                "77857208626471272494956830709768209569",
                "49744995671496189421527670491743900744",
                "219400201692986599708564989767764504648",
                "80516528124641545141775396114331907608",
                "201052820998439040522074875549223718384",
                "260612460974723420859173456318475171406",
                "304897106622815596338583580639377624904"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2025-34336-6e6fcfc0",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/ext/msg/server/ChatServerEndPoint.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "258045078533413315872992569889645594518",
                "259975018244167508696987847685210971073",
                "47037676033786094740920020384253560844",
                "305741628092790694676750238654842949899",
                "87568365592665257302965556371160324416",
                "278263649825149409025513525651316781453",
                "210824237264655640001151457514737272126",
                "151829097530737119583726980966259336646",
                "219481811091417839555094182247468618386",
                "134154114913690343866406285619814593957",
                "260025822753087831242512302048707438453",
                "173386673981733424061851959606011795879",
                "293631897445209146124064061653253800054",
                "284530286852894286573236652454791123294"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2025-34336-7363b5ab",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/utl/fcc/service/EgovFormBasedFileUtil.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "173409472472947047943252456060838584392",
            "length":  672
        },
        "id":  "CVE-2025-34336-8764ea29",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/sym/bat/validation/BatchOpertValidator.java",
            "function":  "validate"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "236198816068000345979052826097502570396",
                "192069360409767883537308336461532253189",
                "140192816118996339732965513045790806908",
                "21306535279954287351807759508813859689",
                "13441156939785830604738462713011811724",
                "13451119255911769098171866195926750824"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2025-34336-a06eee83",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/cmm/EgovWebUtil.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "51174844761364710440070300989267052228",
                "297653126511107566880783953684342786757",
                "102695037134723746531911828360650220752",
                "93833543518600505145428958252973455460",
                "22105296792981028590487279490924577408",
                "122675921133807544260956627539525034530",
                "1006052558404531183367236015627298510",
                "298026018417486446163858035482795063462",
                "214454476443342822171350870916176229822",
                "138260158249635178960446132453059953129",
                "148519892166301632027101441051736125206"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2025-34336-a9298f22",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/utl/sys/fsm/web/EgovFileSysMntrngController.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "36525915159641959404581557905597591185",
                "82135100653318536353932235491282704665",
                "23689478693307264022742494314271747230",
                "193992609803203120010802606957048743242",
                "169255539112047966704009702204631252000",
                "53979873163131787291459850258556672014",
                "63814747574102311439385156001348966845",
                "34690953625250340457613482663443928377",
                "290993990906029808152735404260090772485",
                "77360704974601669276766495378854885384",
                "207582375585004610891411257315710707567",
                "42411035265991923686314086311402977345",
                "330377273433835861371124951180896604647"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2025-34336-ae1cd8da",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/sym/mnu/mcm/web/EgovMenuCreateManageController.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "318660090127241248612756492072322824308",
            "length":  1204
        },
        "id":  "CVE-2025-34336-c9089116",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/sym/mnu/mcm/web/EgovMenuCreateManageController.java",
            "function":  "selectMenuCreatSiteMapInsert"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "335039674755924269621846490181231203264",
                "156339290583108035119179914371411560904",
                "178102188229264130199901165409392848008",
                "38342646970325373141438543246040040763",
                "322217353050623812078363270096925903399",
                "59663301069925285820705544814821008563",
                "29329283871087996599261631005461125095",
                "274566505854229542795647898581815212548",
                "288954640872549738691749593396173098345",
                "284896666334839755034901643574904802817",
                "89435426930129987480715432262495145229"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2025-34336-cc65ab85",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/ext/msg/server/UsersServerEndPoint.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "156419051926028803802105359529478107506",
                "57312018287806551951153975338299971888",
                "67741274140659012960286708269182142586",
                "286101429922681084905481682106366546181",
                "226972617263105739060962926035943486955",
                "178539092481184615401476851055301900442",
                "325077659006331786509928416784942588189"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2025-34336-d0feca1f",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/ext/msg/server/model/decoder/MessageDecoder.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "309414764219344774945328496544567456503",
            "length":  1133
        },
        "id":  "CVE-2025-34336-d903f828",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/utl/sim/service/EgovNetworkState.java",
            "function":  "getNetWorkInfo"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "159108453308846239259283637291522954236",
            "length":  1439
        },
        "id":  "CVE-2025-34336-d9845f07",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/utl/wed/filter/CkImageSaver.java",
            "function":  "saveAndReturnUrlToClient"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "231001322535299321960775842974294277346",
            "length":  158
        },
        "id":  "CVE-2025-34336-db48a853",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/cmm/EgovWebUtil.java",
            "function":  "removeOSCmdRisk"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "223118735198777366676576403095991796515",
            "length":  414
        },
        "id":  "CVE-2025-34336-db72708a",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/uat/uia/web/EgovLoginController.java",
            "function":  "actionGpkiRegist"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "307451714663784159394025339913356095975",
                "163742411605180223773076410983668026066"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2025-34336-ea676a9c",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/sym/mnu/mcm/service/EgovMenuCreateManageService.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "330665912486412085619766342979252280092",
            "length":  692
        },
        "id":  "CVE-2025-34336-ed701525",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/ext/msg/server/ChatServerEndPoint.java",
            "function":  "handleMessage"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "109269885274815214763550272764872810645",
                "316883069033245147022315222924806325756",
                "93833543518600505145428958252973455460",
                "45161620844613331897991997851831646272",
                "231283664092071952569651867261944082997",
                "73009292916623859755487693538648554905",
                "131649150777689118414196302903064327053",
                "325763547628352733047662218878498626649",
                "3935568339590650494972321687923794854",
                "108003492187385977315598044635748606427",
                "329980426110613323545244936588834461482",
                "337663459753325137567477225793433280419",
                "369220855087106318110795321261353090",
                "162302176547355574555828050151375777741",
                "280409040120696611524799658984369374800",
                "318199699902416603877391731665254100361",
                "339989838571430990806723018878496217078",
                "242108074695690863769095379462905570609",
                "204612038844753593070834628507990830401",
                "324358480629768686117111522355757801414",
                "296070118631084851139317016794732695611",
                "61772884626448768136083113394855514764",
                "267850265004400011897319980258807537623",
                "24767210475785746824760979356687381834",
                "119071391243402287873304157711730006997",
                "8342974607224843613408419169153403459",
                "283808406048663606279970121974493366642",
                "278734290793644678302491557534622522142",
                "315217774478042431668597077999843843924",
                "72902152411695475597151355505148041269",
                "189144367541562912531009017866602008833",
                "321214088132605089823118897797960899370"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2025-34336-f4943f84",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/sym/mnu/stm/web/EgovSiteMapngController.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "281510273484914620802812492688155407900",
                "155867627291222135581923676651960749131",
                "26137313395438348273342043638854207612",
                "207739398474158127506630330115499073158",
                "221327314928589132931178698371471565857"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2025-34336-fd79bd2d",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/uss/ion/isg/web/EgovIntnetSvcGuidanceController.java"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "111646828937577190533081192841022314972",
            "length":  633
        },
        "id":  "CVE-2025-34336-fdf1f568",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/sym/mnu/stm/web/EgovSiteMapngController.java",
            "function":  "selectSiteMapng"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "91937181580042873126189401485040498503",
                "300344700096684874353446467118844991274",
                "223411038605561864726733000219460295348",
                "36639420344405211707715575689787973076",
                "47196469337334185594003250758541098556",
                "206025543277651215333780810321077441742",
                "90268860133775204383027805369649417869",
                "41496829701123036818687674848303908397",
                "2320407036034468480723757102164224121",
                "211175604985807361434819642401392611383"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2025-34336-ff24a96f",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/egovframework/egovframe-common-components/commit/d949e4002a6298f01a6e3e765a63e7dd636ad6ae",
        "target":  {
            "file":  "src/main/java/egovframework/com/sym/bat/validation/BatchOpertValidator.java"
        }
    }
]
vanir_signatures_modified 
"2026-10-28T10:45:27Z"