Skip to content
OpenAdvisories

Vendor

yzcheng90

5 known vulnerabilities.

Products

X-SpringBoot 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-97060

    X-SpringBoot through 6.0 Authorization Bypass via User Management

    X-SpringBoot through 6.0 lacks object-level authorization in user management endpoints, allowing sub-administrators to modify or delete users without ownership verification. Attackers with user-management permissions can reset passwords for any account includ…

    yzcheng90 X-SpringBoot