WinterChenS vulnerabilities
We track 3 vulnerabilities in WinterChenS products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2025.
Latest WinterChenS vulnerabilities
- 7.5 High severity
My-site: Improper Access Control
Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class
- 9.8 Critical severity
My-site: Authentication Bypass Using an Alternate Path or Channel
There is an authentication bypass vulnerability in WinterChenS my-site thru commit 6c79286 (2025-06-11). An attacker can exploit this vulnerability to access /admin/ API without any token.
- 9.8 Critical severity
my-site: Improper Authentication
A vulnerability has been found in WinterChenS my-site up to 1f7525f15934d9d6a278de967f6ec9f1757738d8. This vulnerability affects the function preHandle of the file /admin/ of the component Backend Interface. The manipulation of the argument uri leads to improp