Threats tagged 'ghsa-r9m7-h73f-c4f7'

A security vulnerability (CVE-2026-124590) exists in the zhangbw409 library_manager_system affecting the BookController.addBook function in UserController.java. Improper authorization occurs due to manipulation of userName, userPwd, userEmail, or userId arguments. The vulnerability can be exploited remotely and public exploit code is available. The project uses a rolling release model, so no specific affected versions or patches are identified. The vendor has not yet responded to the issue report.