https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-3381.htmlhttps://patchthecve.com/cve/CVE-2025-3381.htmlWed, 17 Jun 2026 09:19:50 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in zhangyanbo2007 youkefu 4.2.0. This affects an unknown part of the file WebIMController.java of the component File Upload. The manipulation of the argument ID leads to path traversal. It is possible to initiate the attack remotely. The ehttps://patchthecve.com/cve/CVE-2025-3241.htmlhttps://patchthecve.com/cve/CVE-2025-3241.htmlWed, 17 Jun 2026 09:19:29 +0000MEDIUM 6.3: A vulnerability, which was classified as problematic, was found in zhangyanbo2007 youkefu up to 4.2.0. This affects an unknown part of the file src/main/java/com/ukefu/webim/web/handler/admin/callcenter/CallCenterRouterController.java of the component XML Document Handler. The manipulation of the arhttps://patchthecve.com/cve/CVE-2025-2997.htmlhttps://patchthecve.com/cve/CVE-2025-2997.htmlWed, 17 Jun 2026 09:08:00 +0000MEDIUM 6.3: A vulnerability was found in zhangyanbo2007 youkefu 4.2.0. It has been classified as critical. Affected is an unknown function of the file /res/url. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed