CNNVD-202602-1102 Information
CNNVD ID
CNNVD-202602-1102
Related CVE
- CNNVD Published: 2026-02-07
Description (Chinese)
warehouse是yeqifu个人开发者的一个基于spring boot的中小型仓库物流管理系统。 warehouse存在授权问题漏洞，该漏洞源于对组件Department Management中文件dataset eposwarehousesrcmainjavacomyeqifusyscontrollerDeptController.java函数addDept/updateDept/deleteDept的错误操作，可能导致授权不当。
Description (English)
Warehouse is a small and medium-sized warehouse logistics management system based on spring Boot, which is ayeqifu personal developer. There is a mandate gap in the warehouse, which stems from a misperformation of the document dataset eposwareyousr and ainjavacompuisyscontroller DeptController.java function addDept/updateDept/deleteDept.
Hazard Level
High
Vulnerability Type
授权问题
Affected Vendor
个人开发者
Published
2026-02-07
Last Modified
2026-02-24
References
https://github.com/yeqifu/warehouse/ https://github.com/yeqifu/warehouse/issues/57 https://github.com/yeqifu/warehouse/issues/57#issue-3846662068 https://vuldb.com/?ctiid.344681 https://vuldb.com/?id.344681 https://vuldb.com/?submit.745515 https://access.redhat.com/security/cve/cve-2026-2105
Share on: