CVE-2022-23383

Affected software : YzmCMS v6.3. Vulnerability : broken access control allows unauthorized access to other users’ personal home pages without login. Root cause : the application fails to verify login status before accessing a personal homepage, enabling non-authenticated access to other users’ ho...