CVE-2022-32430

An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
talelinlin-cms-spring-boot
0.2.1
𝑥
= Vulnerable software versions
References
https://www.mesec.cn/archives/277
https://www.mesec.cn/archives/278
https://www.mesec.cn/archives/277
https://www.mesec.cn/archives/278