| Title | https://github.com/TaleLin/lin-cms-spring-boot lin-cms-spring-boot v0.2.1 Broken Access Control |
|---|
| Description | An unauthorized access vulnerability exists in version 0.2.1 of Lin-CMS Spring Boot. This vulnerability allows remote attackers to create arbitrary books without authorization by exploiting the book creation method within the BookController.java component, and to update the information of any existing book without authorization by exploiting the book update method. |
|---|
| Source | ⚠️ https://github.com/TaleLin/lin-cms-spring-boot/issues/336 |
|---|
| User | DaytimeHeaven (UID 96977) |
|---|
| Submission | 05/04/2026 09:57 (2 months ago) |
|---|
| Moderation | 05/30/2026 07:45 (26 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 367405 [TaleLin lin-cms-spring-boot up to 0.2.1 book Endpoint BookController.java access control] |
|---|
| Points | 18 |
|---|