4 matches found
CVE-2025-45616
Incorrect access control in the /admin/ API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request...
9.8CVSS7AI score0.00447EPSS
SaveExploits1References1
CVE-2025-45616
Incorrect access control in the /admin/ API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request...
6.7AI score0.00447EPSS
SaveExploits1References1
CVE-2025-45616
The com.baidu.mapp:brcc-core (Baidu Better Remote Config Center) component, version 1.2.0 , is vulnerable to an Access Control Bypass in the /admin/ API endpoint. The root cause is insufficient authorization checks where the application uses request.getRequestURI() validation in UserAuthFilter.do...
9.8CVSS6.7AI score0.00447EPSS
SaveExploits1References1Affected Software1
20