CVE-2025-45616

The com.baidu.mapp:brcc-core (Baidu Better Remote Config Center) component, version 1.2.0 , is vulnerable to an Access Control Bypass in the /admin/ API endpoint. The root cause is insufficient authorization checks where the application uses request.getRequestURI() validation in UserAuthFilter.do...