Vendors / WinterChenS Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now WinterChenS records in CISA KEV No WinterChenS vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
There is an authentication bypass vulnerability in WinterChenS my-site thru commit 6c79286 (2025-06-11).
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00441 · Published 2025-08-20 · No fix listed CWE-288
Priority HIGH 82
Incorrect access control in the doFilter function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00579 · Published 2025-08-22 · No fix listed CWE-284
Priority HIGH 72
Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0037 · Published 2025-08-20 · No fix listed CWE-284
Priority HIGH 72
Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0037 · Published 2025-08-20 · No fix listed CWE-284
Priority HIGH 70
A vulnerability has been found in WinterChenS my-site up to 1f7525f15934d9d6a278de967f6ec9f1757738d8.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00585 · Published 2025-08-11 · No fix listed CWE-287
Open these records in search → All records by CVSS severity
2 2 1 0 0
THREATIST.IORead the docs