paicoding vulnerabilities

3 known vulnerabilities in paicoding from Itwanger. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  paicoding: Missing Authorization

  CVE-2026-129143Nov 13, 2026Itwanger

  paicoding 1.0.3 contains a missing authorization vulnerability in the ArticleRestController article detail endpoint that allows unauthenticated attackers to read restricted articles. Attackers can enumerate article IDs via GET /article/api/data/detail/{article

• 8.2 High severity

  paicoding: Use of Weak Credentials

  CVE-2026-129139Nov 13, 2026Itwanger

  paicoding from commit b8206b9 through commit 903adce uses predictable credentials for accounts created via ZSXQ login, because loginByZsxq derives both the username and password solely from the member's ZSXQ number. Unauthenticated attackers can read that numb

• 8.1 High severity

  paicoding: Origin Validation Error

  CVE-2025-4839May 17, 2025Itwanger

  A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/core/util/CrossUtil.java