12 matches found
EUVD-2025-13417
Malicious code in bioql PyPI...
CVE-2025-45616
Incorrect access control in the /admin/ API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request...
Access Control Bypass
Overview Affected versions of this package are vulnerable to Access Control Bypass through the use of request.getRequestURI validation in com.baidu.brcc.config.UserAuthFilter.doFilter. An attacker can gain unauthorized admin rights by sending requests to /admin/ URIs on misconfigured servers. Not...
BRCC Incorrect Access Control vulnerability
Incorrect access control in the /admin/ API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request...
GHSA-W7XJ-PJ5F-8PWH BRCC Incorrect Access Control vulnerability
Incorrect access control in the /admin/ API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request...
CVE-2025-45616
Incorrect access control in the /admin/ API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request...
CVE-2025-45616
Incorrect access control in the /admin/ API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request...
CVE-2025-45616
Incorrect access control in the /admin/ API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request...
CVE-2025-45616
Incorrect access control in the /admin/ API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request...
CVE-2025-45616
The Baidu Better Remote Config Center (BRCC) , specifically version v1.2.0 , is vulnerable to an Access Control Bypass in the /admin/** API endpoint. The root cause is improper validation using request.getRequestURI() within the com.baidu.brcc.config.UserAuthFilter.doFilter() method. If a develop...
PT-2025-19784 · Brcc · Brcc
Name of the Vulnerable Software and Affected Versions: brcc version 1.2.0 Description: The issue is related to incorrect access control in the "/admin/" API endpoint, which allows attackers to gain access to Admin rights via a crafted request. Recommendations: For brcc version 1.2.0, as a tempora...
