Platform
vue
Component
springboot-vue-onlineexam
Fixed in
1.0.1
CVE-2025-3850 describes an improper authentication vulnerability discovered in SpringBoot-Vue-OnlineExam versions 1.0 through 1.0. This flaw allows a remote attacker to bypass authentication mechanisms, potentially gaining unauthorized access to the online exam system. The vulnerability has been publicly disclosed and is considered problematic. A patch is available in version 1.0.1.
Successful exploitation of CVE-2025-3850 could allow an attacker to gain unauthorized access to the SpringBoot-Vue-OnlineExam application without proper credentials. This could lead to the compromise of sensitive exam data, including student answers, grades, and personal information. Depending on the application's configuration and access controls, an attacker might also be able to manipulate exam content, create fraudulent accounts, or disrupt the exam process. The improper authentication bypass could enable a wide range of malicious activities, potentially impacting the integrity and confidentiality of the online examination system.
CVE-2025-3850 has been publicly disclosed, increasing the risk of exploitation. The CVSS score of 3.7 (LOW) indicates a relatively low probability of exploitation, but the public availability of information could accelerate attacks. No specific campaigns or KEV status are currently associated with this CVE. The exploit's difficulty is noted as 'difficult' in the original description. Published on 2025-04-22.
Exploit Status
EPSS
0.21% (43% percentile)
CISA SSVC
CVSS Vector
The primary mitigation for CVE-2025-3850 is to upgrade to version 1.0.1 of SpringBoot-Vue-OnlineExam. If upgrading immediately is not feasible, consider implementing stricter authentication controls as a temporary workaround. This could involve enabling multi-factor authentication (MFA) or implementing rate limiting to prevent brute-force attacks. Regularly review and audit authentication-related configurations to identify and address any potential weaknesses. After upgrading to version 1.0.1, verify the fix by attempting to access the application without valid credentials to confirm authentication is properly enforced.
Actualizar a una versión parcheada o implementar medidas de autenticación más robustas. Revisar y fortalecer los mecanismos de autorización en la API. Considerar la implementación de autenticación de dos factores.
Vulnerability analysis and critical alerts directly to your inbox.
CVE-2025-3850 is a vulnerability in SpringBoot-Vue-OnlineExam versions 1.0–1.0 that allows a remote attacker to bypass authentication controls, potentially gaining unauthorized access. It has a CVSS score of 3.7 (LOW).
If you are using SpringBoot-Vue-OnlineExam version 1.0, you are affected by this vulnerability. Upgrade to version 1.0.1 to mitigate the risk.
The recommended fix is to upgrade to version 1.0.1 of SpringBoot-Vue-OnlineExam. As a temporary workaround, consider implementing stricter authentication controls like MFA.
While no active campaigns are currently known, the vulnerability has been publicly disclosed, increasing the potential for exploitation. Monitor your systems closely.
Refer to the project's official repository or communication channels for the advisory related to CVE-2025-3850. Check the project's website or GitHub repository for updates.
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.