Threats tagged 'ghsa-m82c-2m26-vg76'

A vulnerability in xxyopen/201206030 novel up to version 3.5.0 allows remote attackers to bypass authorization by manipulating the chapterId argument in the getBookChapter function of the Book Chapter Read Handler component. The issue affects the file src/main/java/io/github/xxyopen/novel/service/impl/BookServiceImpl.java. Public exploit code exists, and a patch has been identified to address the flaw.