Skip to content
OpenAdvisories

Product · yzcheng90

X-SpringBoot

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-97063

    X-SpringBoot through 6.0 Authentication Bypass via Login Code

    X-SpringBoot through 6.0 returns login verification codes in HTTP responses from unauthenticated endpoints GET /sys/mobile/code and GET /sys/email/code without sending them to account owners. Attackers can request codes using known mobile numbers or email add…

    yzcheng90 X-SpringBoot
  • Critical 9.1
    CVE-2026-97064

    X-SpringBoot through 6.0 Authentication Bypass via Static Master Code

    X-SpringBoot through 6.0 ships with a hardcoded static master login verification code 172839 enabled by default in the database seed. Unauthenticated attackers can authenticate as any user by submitting the public master code to the emailOrMobileLogin endpoin…

    yzcheng90 X-SpringBoot