Vulnerabilities > CVE-2024-41600 - Unspecified vulnerability in Talelin Lin-Cms-Spring-Boot 0.2.0/0.2.1

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
talelin

Summary

Insecure Permissions vulnerability in lin-CMS Springboot v.0.2.1 and before allows a remote attacker to obtain sensitive information via the login method in the UserController.java component.

Vulnerable Configurations

Part Description Count
Application
Talelin
4