CVE-2025-45611

Published May 5th, 2025

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

N/A

Affected

1

PROJECT

Description

Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request.

java-aodeng/hope-boot

🌱 一款现代化的脚手架项目

GitHub

3.24K