CyberRota Analysis
AI-GeneratedThe SellerAuthorizeAspect component in springboot-project v1.0.0 has an incorrect access control vulnerability that permits unauthenticated attackers to exploit seller management interfaces, enabling them to list products and orders, manipulate sales status, and modify categories. Organizations utilizing this version of the software should prioritize remediation to prevent unauthorized access and potential data breaches. Immediate action is recommended for any entities managing sensitive seller information or e-commerce operations.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication.