A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293bb7b477efa64. (CVE-2026-90520)
A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293bb7b477efa64. This vulnerability affects unknown code of the file AuthorizationInterceptor.java of the component Authorization Interceptor. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The identifier of the patch is d984d172dceca907f8b447efbdb06dc233f7938d. Applying a patch is the recommended action to fix this issue.
AI Analysis
Technical Summary
CVE-2026-90520 describes an improper authorization vulnerability in the AuthorizationInterceptor.java file of the jaychouchannel Tourism-Management-System. This vulnerability can be exploited remotely and leads to unauthorized access or actions due to improper authorization checks. The system uses a rolling release model, so affected versions are identified by commit hashes rather than version numbers. A patch commit d984d172dceca907f8b447efbdb06dc233f7938d addresses the issue.
Potential Impact
The vulnerability allows remote attackers to bypass proper authorization controls, potentially leading to unauthorized information disclosure, modification, or denial of service. The CVSS score of 6.3 indicates a medium severity impact with low complexity attack vector and no user interaction required.
Mitigation Recommendations
Apply the patch identified by commit d984d172dceca907f8b447efbdb06dc233f7938d to remediate the vulnerability. Since the product uses a rolling release model, ensure that the latest updates including this patch are deployed to fix the issue.
A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293bb7b477efa64. (CVE-2026-90520)
Description
A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293bb7b477efa64. This vulnerability affects unknown code of the file AuthorizationInterceptor.java of the component Authorization Interceptor. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The identifier of the patch is d984d172dceca907f8b447efbdb06dc233f7938d. Applying a patch is the recommended action to fix this issue.
CVSS v3.1
Score 6.3medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-90520 describes an improper authorization vulnerability in the AuthorizationInterceptor.java file of the jaychouchannel Tourism-Management-System. This vulnerability can be exploited remotely and leads to unauthorized access or actions due to improper authorization checks. The system uses a rolling release model, so affected versions are identified by commit hashes rather than version numbers. A patch commit d984d172dceca907f8b447efbdb06dc233f7938d addresses the issue.
Potential Impact
The vulnerability allows remote attackers to bypass proper authorization controls, potentially leading to unauthorized information disclosure, modification, or denial of service. The CVSS score of 6.3 indicates a medium severity impact with low complexity attack vector and no user interaction required.
Mitigation Recommendations
Apply the patch identified by commit d984d172dceca907f8b447efbdb06dc233f7938d to remediate the vulnerability. Since the product uses a rolling release model, ensure that the latest updates including this patch are deployed to fix the issue.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-r377-9vpc-59g3
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-90520"]
- Database Specific Severity
- LOW
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6aa7419e55bf5e2cf5489bb4
Added to database: 09/14/2026, 00:36:46 UTC
Last enriched: 09/14/2026, 00:40:56 UTC
Last updated: 09/14/2026, 03:01:22 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.