CVE-2022-32430

An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
VendorProductVersion
talelinlin-cms-spring-boot
0.2.1
𝑥
= Vulnerable software versions
References
https://www.mesec.cn/archives/277
https://www.mesec.cn/archives/278
https://www.mesec.cn/archives/277
https://www.mesec.cn/archives/278