提交 #558414: xxyopen novel V3.5.0 Improper Access Controls
| 标题 | xxyopen novel V3.5.0 Improper Access Controls |
|---|---|
| 描述 | It is possible to perform horizontal privilege escalation to delete or modify any novel chapter of any other author. |
| 来源 | ⚠️ https:/ |
| 用户 | Rorochan (UID 79656) |
| 提交 | 2025-04-15 15時38分 (1 年前) |
| 管理 | 2025-04-28 08時48分 (13 days later) |
| 状态 | 已接受 |
| VulDB条目 | 306401 [201206030 Novel 3.5.0 Chapter AuthorController.java updateBookChapter 权限提升] |
| 积分 | 14 |