Threats tagged 'ghsa-379g-m63m-7f92'

A medium-severity vulnerability (CVE-2026-96880) exists in TaleLin lin-cms-spring-boot up to version 0.2.1. The flaw is in the getBook function of the BookController component, where improper authorization occurs due to manipulation of the ID argument. This vulnerability can be exploited remotely without authentication. Although exploit code has been publicly disclosed, the vendor has not responded or provided a fix. The vulnerability impacts confidentiality but not integrity or availability.