6 matches found
CVE-2026-71241
Book-Management-System's Flask API endpoints /student, /record, /books, /findstubook, and /findnotreturnbook are missing the @loginrequired decorator that protects sibling routes /searchstudent, /storage in the same file. Because cardid values are sequential integers, the entire student database...
CVE-2026-71241 Book-Management-System - Unauthenticated Disclosure of Student PII and Borrowing History
Book-Management-System's Flask API endpoints /student, /record, /books, /findstubook, and /findnotreturnbook are missing the @loginrequired decorator that protects sibling routes /searchstudent, /storage in the same file. Because cardid values are sequential integers, the entire student database...
EUVD-2026-53314
Book-Management-System's Flask API endpoints /student, /record, /books, /findstubook, and /findnotreturnbook are missing the @loginrequired decorator that protects sibling routes /searchstudent, /storage in the same file. This allows any unauthenticated remote user to retrieve student PII name,...
CVE-2026-71241
CVE-2026-71241 affects a Book-Management-System built with Flask. Several endpoints (/student, /record, /books, /find_stu_book, /find_not_return_book) are missing the @login_required decorator that protects related routes (/search_student, /storage). This misconfiguration allows any unauthenticat...
CVE-2026-71241 Book-Management-System - Unauthenticated Disclosure of Student PII and Borrowing History
Book-Management-System's Flask API endpoints /student, /record, /books, /findstubook, and /findnotreturnbook are missing the @loginrequired decorator that protects sibling routes /searchstudent, /storage in the same file. Because cardid values are sequential integers, the entire student database...
CVE-2026-71241
Book-Management-System's Flask API endpoints /student, /record, /books, /findstubook, and /findnotreturnbook are missing the @loginrequired decorator that protects sibling routes /searchstudent, /storage in the same file. This allows any unauthenticated remote user to retrieve student PII name,...