critical9.8
CVE-2025-45616
BRCC Incorrect Access Control vulnerability
Impact
Incorrect access control in the /admin/** API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | com.baidu.mapp:brcc-core | <= 1.2.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Baidu | Brcc | through 1.2.0 |