Skip to content
OpenAdvisories

Vendor

stylefeng

2 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Medium 6.5

    Guns through 8.3.5 Improper Access Control via SysNoticeController

    Guns through 8.3.5 contains an improper access control vulnerability in SysNoticeController where requiredPermission defaults to false and is not overridden by any action methods. Authenticated users without assigned roles can exploit this to create, edit, de…

  • Medium 6.5

    Guns through 8.3.5 Information Disclosure via Missing Permission Check

    Guns through 8.3.5 contains an information disclosure vulnerability in SysUserController where /sysUser/detail and /sysUser/page endpoints omit requiredPermission configuration, causing the permission interceptor to skip RBAC validation for authenticated user…