My-site vulnerabilities

3 known vulnerabilities in My-site from WinterChenS. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  My-site: Improper Access Control

  CVE-2024-57152Aug 20, 2025WinterChenS

  Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class

• 9.8 Critical severity

  My-site: Authentication Bypass Using an Alternate Path or Channel

  CVE-2025-50904Aug 20, 2025WinterChenS

  There is an authentication bypass vulnerability in WinterChenS my-site thru commit 6c79286 (2025-06-11). An attacker can exploit this vulnerability to access /admin/ API without any token.

• 9.8 Critical severity

  my-site: Improper Authentication

  CVE-2025-8838Aug 11, 2025WinterChenS

  A vulnerability has been found in WinterChenS my-site up to 1f7525f15934d9d6a278de967f6ec9f1757738d8. This vulnerability affects the function preHandle of the file /admin/ of the component Backend Interface. The manipulation of the argument uri leads to improp