| Title | https://github.com/logamee/lin-cms-spring-boot lin-cms 0.2.1 unauthorized access vulnerability |
|---|
| Description | There is an unauthorized access vulnerability in version 0.2.1 of Lin-CMS Spring Boot. This vulnerability allows remote attackers to query books without authorization by exploiting the book query method in the BookController.java component; by directly accessing the /v1/book/{id} path, they can directly obtain the relevant book details. |
|---|
| Source | ⚠️ https://github.com/hhhh333/CVE/blob/main/Lin-CMS-%E6%9C%AA%E6%8E%88%E6%9D%83.md |
|---|
| User | hhhha (UID 89875) |
|---|
| Submission | 07/26/2026 17:46 (2 months ago) |
|---|
| Moderation | 09/23/2026 20:15 (2 months later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 409078 [TaleLin lin-cms-spring-boot up to 0.2.1 book Endpoint BookController.java getBook ID improper authorization] |
|---|
| Points | 19 |
|---|