Threats tagged 'ghsa-cfhj-grhg-7vf3'

A vulnerability in xxyopen/201206030 novel up to version 3.5.0 affects the Book Content Service component, specifically the BookServiceImpl.getBookContentAbout function. The flaw involves improper authorization due to manipulation of the chapterId argument, allowing remote attackers to exploit it. A patch identified by commit 966c4bdde3521dc0a165d15a2acff66ee33eaaa7 is available and should be applied to resolve the issue. The vulnerability has a CVSS score of 5.3 (medium severity).