CVE-2024-57152

Description

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class

Affected Platforms

Weakness Type

CWE-284

References

• https://github.com/WinterChenS/my-site/issues/92