What’s Vulnerable › Vulnerabilities

CVE-2025-4260: zhangyanbo2007 youkefu TemplateController.java impsave deserialization

• Severity: high (CVSS 8.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-05-05 · updated 2026-06-17
• Weakness: CWE-20

Description

A vulnerability was found in zhangyanbo2007 youkefu up to 4.2.0 and classified as problematic. Affected by this issue is the function impsave of the file m\web\handler\admin\system\TemplateController.java. The manipulation of the argument dataFile leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

• zhangyanbo2007 youkefu: 4.2.0

References

• https://github.com/Serein123y/vulnerability/blob/main/vul.md
• https://vuldb.com/?ctiid.307364
• https://vuldb.com/?id.307364
• https://vuldb.com/?submit.562902

Get alerted when CVE-2025-4260 or the next vulnerability affects your stack