critical9.8
CVE-2025-50904
There is an authentication bypass vulnerability in WinterChenS my-site thru commit 6c79286 (2025-06-11).
Impact
There is an authentication bypass vulnerability in WinterChenS my-site thru commit 6c79286 (2025-06-11). An attacker can exploit this vulnerability to access /admin/ API without any token.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Winterchens | My-Site | through 2025-06-11 |