critical9.8
CVE-2025-45611
Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request.
Impact
Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Java-Aodeng | Hope-Boot | Version 1.0.0 |