All 2 CVE vulnerabilities found in xiaozhi-esp32-server-java, with AI-generated Chinese analysis, references, and POCs.
Vendor: joey-zhou
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-15135 | joey-zhou xiaozhi-esp32-server-java Cookie AuthenticationInterceptor.java tryAuthenticateWithCookies improper authentication CWE-287 | 6.3 | Medium | 2025-12-28 |
| CVE-2025-3382 | joey-zhou xiaozhi-esp32-server-java update sql injection CWE-89 | 6.3 | Medium | 2025-04-07 |
All 2 known CVE vulnerabilities affecting xiaozhi-esp32-server-java with full Chinese analysis, references, and POCs where available.