CVE-2025-45615

Incorrect access control in the /admin/ API of yaoqishan v0.0.1-SNAPSHOT allows attackers to gain access to Admin rights via a crafted request...

CVE-2025-45615

CVE-2025-45615 affects yaoqishan v0.0.1-SNAPSHOT; the /admin/ API has improper access control that can let an attacker obtain Admin rights via a crafted request. CVSSv3.1 base score 9.8 (CRITICAL). Exploitation details are not provided in the documents beyond a PoC/Exploitation field indicating p...