This vulnerability in TaleLin lin-cms-spring-boot up to version 0.2.1 involves improper authorization in the getBook function of the BookController.java file. An attacker can remotely manipulate the ID parameter to access resources without proper authorization. The flaw is exploitable remotely without authentication or user interaction. Public exploit code exists, and the vendor has not provided a fix or response to the disclosure.

Successful exploitation allows an unauthenticated remote attacker to bypass authorization controls and potentially access or manipulate book resources that should be restricted. This could lead to unauthorized data access or modification within the affected application.

No official fix or patch is currently available from the vendor. Users should monitor the vendor's communications for updates. Until a patch is released, consider restricting access to the affected endpoints or implementing additional access controls at the network or application layer to mitigate unauthorized access.