CVE-2025-4016

CVE-2025-4016 affects Novel-Plus versions 20120630 through 0e156c04b4b7ce0563bef6c97af4476fcda8f160, specifically the function deleteIndex in novel-admin/src/main/java/com/java2nb/common/controller/LogController.java. The root cause is improper authorization, enabling remote initiation of an atta...