| Titolo | https://github.com/TaleLin/lin-cms-spring-boot lin-cms-spring-boot v0.2.1 Broken Access Control |
|---|
| Descrizione | An unauthorized access vulnerability exists in version 0.2.1 of Lin-CMS Spring Boot. This vulnerability allows remote attackers to create arbitrary books without authorization by exploiting the book creation method within the BookController.java component, and to update the information of any existing book without authorization by exploiting the book update method. |
|---|
| Fonte | ⚠️ https://github.com/TaleLin/lin-cms-spring-boot/issues/336 |
|---|
| Utente | DaytimeHeaven (UID 96977) |
|---|
| Sottomissione | 04/05/2026 09:57 (3 mesi fa) |
|---|
| Moderazione | 30/05/2026 07:45 (26 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 367405 [TaleLin lin-cms-spring-boot fino a 0.2.1 book Endpoint BookController.java escalationi di privilegi] |
|---|
| Punti | 18 |
|---|