CNNVD-202602-1100 Information
CNNVD ID
CNNVD-202602-1100
Related CVE
- CNNVD Published: 2026-02-07
Description (Chinese)
warehouse是yeqifu个人开发者的一个基于spring boot的中小型仓库物流管理系统。 warehouse存在授权问题漏洞，该漏洞源于对组件Log Info Handler中文件dataset eposwarehousesrcmainjavacomyeqifusyscontrollerLoginfoController.java函数loadAllLoginfo/deleteLoginfo/batchDeleteLoginfo的错误操作，可能导致授权不当。
Description (English)
Warehouse is a small and medium-sized warehouse logistics management system based on spring Boot, which is ayeqifu personal developer. There is a mandate gap in the warehouse, which stems from a misperformation of the document dataset eposwarehousr and ainjavacompeifusyscontroller Loginfo.java function loadAllLoginfo/deleteLoginfo/batchDeleteLoginfo.
Hazard Level
High
Vulnerability Type
授权问题
Affected Vendor
个人开发者
Published
2026-02-07
Last Modified
2026-02-24
References
https://github.com/yeqifu/warehouse/ https://github.com/yeqifu/warehouse/issues/59 https://github.com/yeqifu/warehouse/issues/59#issue-3846665806 https://vuldb.com/?ctiid.344683 https://vuldb.com/?id.344683 https://vuldb.com/?submit.745517 https://access.redhat.com/security/cve/cve-2026-2107
Share on: