TI-2026-63912 CVE-2026-96882 · GHSA-fhj3-239p-54qc
TaleLin lin-cms-spring-boot book Endpoint BookController.java searchBook improper authorization
Priority HIGH 70
A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1.
TaleLin
Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
TaleLin records in CISA KEVNo TaleLin vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
10 records
TI-2026-63910 CVE-2026-96880 · GHSA-379g-m63m-7f92
TaleLin lin-cms-spring-boot book Endpoint BookController.java getBook improper authorization
Priority HIGH 70
A vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1.
TI-2026-63911 CVE-2026-96881 · GHSA-rf2v-x72r-q5h8
TaleLin lin-cms-spring-boot book Endpoint BookController.java getBooks improper authorization
Priority MEDIUM 64
A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1.
TI-2025-13829 CVE-2025-15151 · GHSA-xc62-88x4-447w
TaleLin Lin-CMS Tests Folder config.py password in configuration file
Priority MEDIUM 61
A vulnerability was determined in TaleLin Lin-CMS up to 0.6.0.
TI-2026-08890 CVE-2026-10152 · GHSA-52gq-5v7r-xrxp
TaleLin lin-cms-spring-boot book Endpoint BookController.java access control
Priority MEDIUM 57
A vulnerability was detected in TaleLin lin-cms-spring-boot up to 0.2.1.
TI-2020-13441 CVE-2020-18701 · GHSA-3m58-3m5q-53hq
Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain…
Priority MEDIUM 46
Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's authentication token upon logout, which all…
TI-2020-13439 CVE-2020-18698 · GHSA-h6r2-pgvx-683c
Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute…
Priority MEDIUM 46
Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'.
TI-2022-14099 CVE-2022-32430 · GHSA-q72p-4w56-hx7h
An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the…
Priority MEDIUM 41
An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application.
TI-2024-27688 CVE-2024-41600 · GHSA-9g8f-2366-pj88
Insecure Permissions vulnerability in lin-CMS Springboot v.0.2.1 and before allows a…
Priority LOW 33
Insecure Permissions vulnerability in lin-CMS Springboot v.0.2.1 and before allows a remote attacker to obtain sensitive information via the login method in the UserController.java component.
TI-2020-13440 CVE-2020-18699 · GHSA-rvf8-c35m-8289
Cross Site Scripting (XSS) in Lin-CMS-Flask v0.1.1 allows remote attackers to execute…
Priority LOW 30
Cross Site Scripting (XSS) in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'.