CVE-2025-4260

Name of the Vulnerable Software and Affected Versions zhangyanbo2007 youkefu version 4.2.0 and earlier

Description A vulnerability was found in the function impsave of the file mwebhandleradminsystemTemplateController.java. The manipulation of the argument dataFile leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Recommendations For zhangyanbo2007 youkefu version 4.2.0 and earlier, consider disabling the impsave function in the TemplateController.java file until a patch is available. Restrict access to the dataFile argument to minimize the risk of exploitation.