CVE-2025-0704

Name of the Vulnerable Software and Affected Versions JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d

Description A problematic issue was found in the qrCode function of the QrCodeController.java file. The manipulation of the w/h argument leads to resource consumption. This issue can be exploited remotely.

Recommendations As a temporary workaround, consider disabling the qrCode function until a fix is available. Restrict access to the QrCodeController.java file to minimize the risk of exploitation. Avoid using the w/h argument in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.