| 标题 | https://github.com/TaleLin/lin-cms-spring-boot lin-cms-spring-boot v0.2.1 Broken Access Control |
|---|
| 描述 | An unauthorized access vulnerability exists in version 0.2.1 of Lin-CMS Spring Boot. This vulnerability allows remote attackers to create arbitrary books without authorization by exploiting the book creation method within the BookController.java component, and to update the information of any existing book without authorization by exploiting the book update method. |
|---|
| 来源 | ⚠️ https://github.com/TaleLin/lin-cms-spring-boot/issues/336 |
|---|
| 用户 | DaytimeHeaven (UID 96977) |
|---|
| 提交 | 2026-05-04 09時57分 (5 月前) |
|---|
| 管理 | 2026-05-30 07時45分 (26 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 367405 [TaleLin lin-cms-spring-boot 直到 0.2.1 book Endpoint BookController.java 权限提升] |
|---|
| 积分 | 18 |
|---|