<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: 1902756969</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-0403: A vulnerability, which was classified as problematic, has been found in 1902756969 reggie 1.0</title><link>https://patchthecve.com/cve/CVE-2025-0403.html</link><guid>https://patchthecve.com/cve/CVE-2025-0403.html</guid><pubDate>Wed, 17 Jun 2026 08:26:24 +0000</pubDate><description>MEDIUM 5.3: A vulnerability, which was classified as problematic, has been found in 1902756969 reggie 1.0. Affected by this issue is some unknown functionality of the file /user/sendMsg of the component Phone Number Validation Handler. The manipulation of the argument code leads to information disclosure. The a</description></item><item><title>CVE-2025-0402: A vulnerability classified as critical was found in 1902756969 reggie 1.0</title><link>https://patchthecve.com/cve/CVE-2025-0402.html</link><guid>https://patchthecve.com/cve/CVE-2025-0402.html</guid><pubDate>Wed, 17 Jun 2026 08:26:24 +0000</pubDate><description>MEDIUM 6.3: A vulnerability classified as critical was found in 1902756969 reggie 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/itheima/reggie/controller/CommonController.java. The manipulation of the argument file leads to unrestricted upload. The attack can be launch</description></item><item><title>CVE-2025-0401: A vulnerability classified as critical has been found in 1902756969 reggie 1.0</title><link>https://patchthecve.com/cve/CVE-2025-0401.html</link><guid>https://patchthecve.com/cve/CVE-2025-0401.html</guid><pubDate>Wed, 17 Jun 2026 08:26:24 +0000</pubDate><description>MEDIUM 5.3: A vulnerability classified as critical has been found in 1902756969 reggie 1.0. Affected is the function download of the file src/main/java/com/itheima/reggie/controller/CommonController.java. The manipulation of the argument name leads to path traversal. It is possible to launch the attack remotely</description></item></channel></rss>