CVE-2026-123676

The xxyopen/201206030 novel software (versions up to 3.5.0 ) is vulnerable to an improper authorization issue in the Book Content Service component. Specifically, the BookServiceImpl.getBookContentAbout function in src/main/java/io/github/xxyopen/novel/service/impl/BookServiceImpl.java fails to p...