CVE-2025-7450

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-7450

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7450.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-7450

Published

2025-07-11T17:02:05.790Z

Modified

2026-07-15T01:49:11.191168912Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

letseeqiji gorobbs API user.go ResetUserAvatar path traversal

Details

A vulnerability was found in letseeqiji gorobbs up to 1.0.8. It has been classified as critical. This affects the function ResetUserAvatar of the file controller/api/v1/user.go of the component API. The manipulation of the argument filename leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Database specific

{
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "1.0.0"
                },
                {
                    "last_affected": "1.0.0"
                },
                {
                    "introduced": "1.0.1"
                },
                {
                    "last_affected": "1.0.1"
                },
                {
                    "introduced": "1.0.2"
                },
                {
                    "last_affected": "1.0.2"
                },
                {
                    "introduced": "1.0.3"
                },
                {
                    "last_affected": "1.0.3"
                }
            ]
        }
    ],
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/7xxx/CVE-2025-7450.json"
}

References

Affected packages

Git / github.com/letseeqiji/gorobbs

Affected ranges

Type

GIT

Repo

https://github.com/letseeqiji/gorobbs

Events

Introduced

29ce5f1d7bcb61d9a436b22a213ecc7b44c15b6e

Last affected

09058e8336fd3669ac2eb344da742d5bd6de0493

Database specific

{
    "extracted_events": [
        {
            "introduced": "1.0.4"
        },
        {
            "last_affected": "1.0.4"
        },
        {
            "introduced": "1.0.5"
        },
        {
            "last_affected": "1.0.5"
        },
        {
            "introduced": "1.0.6"
        },
        {
            "last_affected": "1.0.6"
        },
        {
            "introduced": "1.0.7"
        },
        {
            "last_affected": "1.0.7"
        },
        {
            "introduced": "1.0.8"
        },
        {
            "last_affected": "1.0.8"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

1.*

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7450.json"