100 matches found
CVE-2024-53494
The SpringBootBlog software (also referred to as Kyrie Blog ) version 1.0.0 is vulnerable to an improper access control issue within the preHandle function. This flaw allows an attacker to bypass authentication and gain unauthorized access to sensitive components . To remediate this, users should...
Kyrie Blog 安全漏洞
Kyrie Blog is a personal blogging system by caozongpeng individual developer. A security vulnerability exists in Kyrie Blog version 1.0.0, which stems from improper access control of the preHandle function, which may result in unauthorized access to sensitive components...
PT-2025-34447 · Unknown · Springboot-Blog
Name of the Vulnerable Software and Affected Versions: SpringBootBlog version 1.0.0 Description: An incorrect access control issue exists in the preHandle function of SpringBootBlog version 1.0.0. This allows attackers to access sensitive components without proper authentication. Recommendations:...
CVE-2024-53494: Improper Access Control
Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive components without authentication...
CVE-2024-57152
Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...
CVE-2024-57152
Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...
CVE-2024-53495
Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication...
CVE-2024-53495
Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication...
CVE-2024-50640
jeewx-boot 1.3 has an authentication bypass vulnerability in the preHandle function...
CVE-2024-57491
Authentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit this vulnerability to access sensitive API without any token via the preHandle function...
CVE-2024-57491
Authentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit this vulnerability to access sensitive API without any token via the preHandle function...
CVE-2024-57152: Improper Access Control
Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...
CVE-2024-53495: Improper Access Control
Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication...
CVE-2024-50640: Improper Authentication
jeewx-boot 1.3 has an authentication bypass vulnerability in the preHandle function...
jobx 安全漏洞
jobx is an open source make scheduling software from Datavane. A security vulnerability exists in jobx v1.0.1-RELEASE and earlier versions, which stems from an authentication bypass vulnerability in the preHandle function that could lead to unauthorized access to sensitive APIs...
CVE-2024-57152
The personal website my-site v1.0.2 is vulnerable to improper access control within the preHandle function of the cn.luischen.interceptor.BaseInterceptor class. This flaw allows unauthenticated attackers to gain unauthorized access to sensitive components. As a remediation, users should update to...
CVE-2024-53495
Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication...
CVE-2024-57491
Authentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit this vulnerability to access sensitive API without any token via the preHandle function...
Jeewx-Boot 安全漏洞
Jeewx-Boot is an official JEECG open source open source microsoft housekeeping platform. A security vulnerability exists in Jeewx-Boot version 1.3, which stems from an authentication bypass vulnerability in the preHandle function...
my-site 安全漏洞
my-site is WinterChenS individual developer's personal website based on springboot2.0 development, integrated: personal home page, personal blog, personal works. A security vulnerability exists in my-site v1.0.2, which stems from improper access control of the preHandle function, which could lead...