OneBlog permission permission and access control issues vulnerability

OneBlog is a beautiful, powerful Java blog. OneBlog in version 2.2.8 and earlier is vulnerable to a permission permission and access control issue, which stems from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker could exploit the vulnerability to cause lower-level administrators can remove senior administrators who exceed their privileges.