Itwanger vulnerabilities
We track 3 vulnerabilities in Itwanger products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
Latest Itwanger vulnerabilities
- 7.5 High severity
paicoding: Missing Authorization
paicoding 1.0.3 contains a missing authorization vulnerability in the ArticleRestController article detail endpoint that allows unauthenticated attackers to read restricted articles. Attackers can enumerate article IDs via GET /article/api/data/detail/{article
- 8.2 High severity
paicoding: Use of Weak Credentials
paicoding from commit b8206b9 through commit 903adce uses predictable credentials for accounts created via ZSXQ login, because loginByZsxq derives both the username and password solely from the member's ZSXQ number. Unauthenticated attackers can read that numb
- 8.1 High severity
paicoding: Origin Validation Error
A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/core/util/CrossUtil.java