CVE-2025-50904

The WinterChenS my-site personal website, based on springboot 2.0 , is vulnerable to an authentication bypass (CWE-288) in versions through commit 6c79286 (2025-06-11). An attacker can exploit this flaw to gain unauthorized access to the /admin/ API without providing a required token. Practical c...