CVE-2025-55948

The yzcheng90 X-SpringBoot 6.0 platform suffers from an incorrect privilege assignment vulnerability (CWE-266) within its role-based access control (RBAC) system. The root cause is a lack of atomic synchronization between frontend menu systems and backend permission tables . Specifically, when pr...

PT-2025-49143

Name of the Vulnerable Software and Affected Versions yzcheng90 X-SpringBoot version 6.0 Description The issue stems from a role-based access control RBAC implementation that relies on both frontend menu systems and backend permission tables, lacking atomic synchronization between them. A...