CVE-2025-45614

Incorrect access control in the component /api/user/manager of One v1.0 allows attackers to access sensitive information via a crafted payload...

CVE-2025-45614

Incorrect access control in the component /api/user/manager of One v1.0 allows attackers to access sensitive information via a crafted payload...

CVE-2025-45614

The backend management system One v1.0 (developed by lcw2004 and based on Spring Boot and Vue2) is vulnerable to an improper access control issue in the /api/user/manager component. This flaw allows an attacker to access sensitive information by sending a crafted payload. No official patch is cur...