The library management system has an unauthorized access vulnerability, allowing unauthorized access to the administrator's backend.

[Jszdk]

Vulnerability Description

Attackers can access the management backend without logging in and perform CRUD operations on the system.

Vulnerability Analysis

1、The system has no global permission interceptors configured.(WebConfig.java)(BookController.java)

Vulnerability Reproduction

1、Accessing /admin_books.html without logging in successfully logs into the management system, allowing users to perform CRUD operations.


2、Add book information