| Title | Xinhu RockOA 2.6.5 CWE-285 |
|---|
| Description | n xinhu v2.6.9, the publicsaveAjax method contains both vertical and horizontal privilege escalation issues. This allows a low-privileged user to arbitrarily write to or modify database records, resulting in a severe authorization flaw. |
|---|
| Source | ⚠️ https://github.com/rainrocka/xinhu/issues/9 |
|---|
| User | ez-lbz (UID 87033) |
|---|
| Submission | 08/17/2025 05:58 (12 months ago) |
|---|
| Moderation | 08/28/2025 17:03 (11 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 321778 [Xinhu RockOA up to 2.6.9 /index.php publicsaveAjax improper authorization] |
|---|
| Points | 16 |
|---|