CVE-2025-45611

CVE-2025-45611 affects Hope-Boot v1.0.0. The issue is improper access control in the /user/edit/ component that allows bypassing authentication via a crafted GET request. The CVSS v3.1 base score is 9.8 (CRITICAL) with Network attack vector, no privileges, no user interaction required, and impact...