CVE-2025-12305: Quequnlong Shiyi-Blog

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability was found in quequnlong shiyi-blog up to 1.2.1. This impacts an unknown function of the file src/main/java/com/mojian/controller/SysJobController.java of the component Job Handler. The manipulation results in deserialization. The attack can be executed remotely. The exploit has been made public and could be used.

Affected products

• Quequnlong Shiyi-Blog: up to and including 1.2.1

Published 2025-10-27. Last modified 2026-10-08.