Description
Incorrect access control in the /admin/** API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.baidu.mapp:brcc-core | <= 1.2.0 | — | GHSA-w7xj-pj5f-8pwh |