{"id":"CVE-2025-0704","summary":"JoeyBling bootplus QrCodeController.java qrCode resource consumption","details":"A vulnerability, which was classified as problematic, was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. Affected is the function qrCode of the file src/main/java/io/github/controller/QrCodeController.java. The manipulation of the argument w/h leads to resource consumption. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.","modified":"2026-10-28T02:30:57.301708059Z","published":"2025-01-24T18:31:07.998Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/0xxx/CVE-2025-0704.json","cna_assigner":"VulDB","cwe_ids":["CWE-400","CWE-404"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/0xxx/CVE-2025-0704.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0704"},{"type":"ADVISORY","url":"https://vuldb.com/?id.293232"},{"type":"ADVISORY","url":"https://vuldb.com/?submit.480843"},{"type":"REPORT","url":"https://github.com/JoeyBling/bootplus/issues/26"},{"type":"REPORT","url":"https://github.com/JoeyBling/bootplus/issues/26#issue-2786934642"},{"type":"REPORT","url":"https://vuldb.com/?ctiid.293232"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/joeybling/bootplus","events":[{"introduced":"247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d"},{"last_affected":"247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d"}],"database_specific":{"extracted_events":[{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d"},{"last_affected":"247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d"}]}]}}],"versions":["247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-0704.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}]}