CyberRota Analysis
AI-GeneratedThe BookController download endpoint in novel-plus versions up to 5.3.3 is vulnerable to an authorization bypass, allowing authenticated backend accounts to export full book text, including paid chapters, without proper verification. This flaw enables attackers to access restricted content by manipulating the bookId and bookName parameters, circumventing existing permission checks. Organizations using this software should prioritize patching this vulnerability to prevent unauthorized access to sensitive content.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
novel-plus through 5.3.3 contains an authorization bypass vulnerability in the BookController download endpoint that allows authenticated backend accounts to export complete book text including paid chapters. Attackers can supply a bookId and bookName to retrieve all chapter content without VIP or purchase verification, bypassing the permission checks and data-scope limits enforced elsewhere in the admin interface.