Youlai-boot vulnerabilities
2 known vulnerabilities in Youlai-boot from Youlai. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest first
- 7.1 High severity
Youlai-boot: Improper Access Control
youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does not perform a permission check on the current user's identity, which may allow regular users to import user data into the database, resulting
- 7.5 High severity
Youlai-boot: Improper Access Control
youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in SysRoleController.java does not perform permission checks, which may allow non-root users to directly access root roles.