CVE-2025-4533: jeecg jeecg_boot Uncontrolled Resource Consumption
Vulnerability summary
CVE-2025-4533 is a high (CVSS 7.5) Uncontrolled Resource Consumption vulnerability in jeecg jeecg_boot. EPSS estimates a 0.79% chance of exploitation in the next 30 days, higher than 55.3% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 11-05-2025PublishedVulnerability first disclosed.
- 12-05-2025Last modifiedVulnerability information updated.
Description
A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0. This vulnerability affects the function unzipFile of the file /jeecg-boot/airag/knowledge/doc/import/zip of the component Document Library Upload. The manipulation of the argument File leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS metrics
7 scores · 2 sources · 4 versions- NVDNIST5.1MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVE.orgCNA2.7LowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:LDiffers
- NVDNIST3.3LowAV:N/AC:L/Au:M/C:N/I:N/A:P
EPSS trend
Probability
0.79%
Chance of exploitation in the next 30 days
Percentile
55%
Versus all other CVEs
30-day change
+0.07 pp
From 0.72% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundJeecgboot
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Jeecg1 product
- jeecg_boot≤ 3.8.0
1 vendor · 1 product