6 matches found
CVE-2026-18631
CVE-2026-18631 affects jeePay/jeepay up to 3.2.9, targeting the WebSecurityConfig logic in jeepay-manager/src/main/java/com/jeequan/jeepay/mgr/ctrl/sysuser/SysLogController.java (PreAuthorize Handler). Root cause described as an authorization bypass, potentially exploitable remotely. Public explo...
CVE-2025-3398
A vulnerability classified as critical was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function configure of the file blogserver/src/main/java/org/sang/config/WebSecurityConfig.java. The manipulation leads to improper access controls. The attack can be launched remotel...
CVE-2025-3398 lenve VBlog WebSecurityConfig.java configure access control
A vulnerability classified as critical was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function configure of the file blogserver/src/main/java/org/sang/config/WebSecurityConfig.java. The manipulation leads to improper access controls. The attack can be launched remotel...
CVE-2025-3398
CVE-2025-3398 affects lenve VBlog up to 1.0.0. The vulnerability resides in the configure function of WebSecurityConfig.java, enabling improper access controls and permitting remote attacks. Multiple sources (Red Hat, NVD/CVE entry, CVE list) describe the issue as critical with remote exploitatio...
CVE-2025-25585
CVE-2025-25585 affects yimioa prior to v2024.07.04. The vulnerability is in the component /config/WebSecurityConfig.java and is caused by incorrect access control, enabling unauthorized attackers to arbitrarily modify the administrator password. The CVE details from multiple sources align on this...
