CNNVD-202601-2962 Information
CNNVD ID
CNNVD-202601-2962
Related CVE
- CNNVD Published: 2026-01-18
Description (Chinese)
PublicCMS是中国PublicCMS公司的一套使用Java语言编写的开源内容管理系统（CMS）。 PublicCMS 5.202506.d及之前版本存在授权问题漏洞，该漏洞源于对文件publiccms-trade/src/main/java/com/publiccms/controller/web/trade/TradeAddressController.java中组件Trade Address Deletion Endpoint的函数delete的参数ids的错误操作，可能导致授权不当。
Description (English)
PublicCMS is an open-source content management system (CMS) developed in Java by PublicCMS, China. PublicCMS 5.20206.d and previous versions have a mandate gap, which stems from the mishandling of the parameters ids of the Trade Addes Defense Endpoint function ids of document publiccms-trade/src/main/java/com/publicccms/controller/web/trade/tradeAddressController.java, which may lead to inappropriate delegation of authority.
Hazard Level
High
Vulnerability Type
授权问题
Affected Vendor
PublicCMS
Published
2026-01-18
Last Modified
2026-02-24
References
https://vuldb.com/?id.341704 https://github.com/AnalogyC0de/public_exp/issues/4 https://vuldb.com/?ctiid.341704 https://vuldb.com/?submit.732771 https://access.redhat.com/security/cve/cve-2026-1112
Share on: