TI-2026-02539 CVE-2026-2947 · GHSA-85vj-mhr5-mmvc
rymcu forest User Profile UserInfoController.java updateUserInfo cross site scripting
Priority MEDIUM 56
A vulnerability was detected in rymcu forest up to 0.0.5.
Vulnerabilities
6 records
TI-2026-02538 CVE-2026-2946 · GHSA-5v2q-744p-wj8v
rymcu forest Article Content/Comments/Portfolio XssUtils.java XssUtils.replaceHtmlCode cross site scripting
Priority MEDIUM 56
A security vulnerability has been detected in rymcu forest up to 0.0.5.
TI-2025-11842 CVE-2025-12925 · GHSA-c9jg-5vh8-ff2v
rymcu forest UserDicController.java deleteDic authorization
Priority HIGH 70
A security flaw has been discovered in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224.
TI-2025-11841 CVE-2025-12924 · GHSA-mfg3-2r9j-5hv9
rymcu forest BankController.java GlobalResult authorization
Priority LOW 24
A vulnerability was identified in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224.
TI-2025-39417 CVE-2025-63687 · GHSA-2qv6-8qcf-2852
An issue was discovered in rymcu forest thru commit f782e85 (2025-09-04) in function…
Priority MEDIUM 62
An issue was discovered in rymcu forest thru commit f782e85 (2025-09-04) in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete ar…
TI-2023-28428 CVE-2023-51804 · GHSA-4fwh-vhv3-7xx7
An issue in rymcu forest v.0.02 allows a remote attacker to obtain sensitive information…
Priority HIGH 72
An issue in rymcu forest v.0.02 allows a remote attacker to obtain sensitive information via manipulation of the HTTP body URL in the com.rymcu.forest.web.api.common.UploadController file.