CVE-2024-41601

Insecure Permissions vulnerability in lin-CMS v.0.2.0 and before allows a remote attacker to obtain sensitive information via the login method in the UserController.java component.

Score

CVSS 3.1 7.5 High

Status

Deferred - cve@mitre.org

Published

2024-07-19

Last modified

2025-03-13

Weaknesses

CWE-277

Affected products

• Lin-cms-java-core (Talelin)

References

• https://github.com/topsky979/Security-Collections/tree/main/CVE-2024-41601