CVE-2025-45611

Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request...

CVE-2025-45611

CVE-2025-45611 affects Hope-Boot v1.0.0. The issue is improper access control in the /user/edit/ component that allows bypassing authentication via a crafted GET request. The CVSS v3.1 base score is 9.8 (CRITICAL) with Network attack vector, no privileges, no user interaction required, and impact...