MEDIUM 5.5 NVD
CVE-2026-123676
A vulnerability has been found in xxyopen/201206030 novel up to 3.5.0. This impacts the function BookServiceImpl.getBookContentAbout of the file src/main/java/i
A vulnerability has been found in xxyopen/201206030 novel up to 3.5.0. This impacts the function BookServiceImpl.getBookContentAbout of the file src/main/java/io/github/xxyopen/novel/service/impl/BookServiceImpl.java of the component Book Content Service. Such manipulation of the argument chapterId leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 966c4bdde3521dc0a165d15a2acff66ee33eaaa7. Applying a patch is advised to resolve this issue.
References
- https://github.com/201206030/novel/commit/966c4bdde3521dc0a165d15a2acff66ee33eaaa7
- https://github.com/201206030/novel/pull/52
- https://vuldb.com/cve/CVE-2026-123676
- https://vuldb.com/submit/1033603
- https://vuldb.com/vuln/431793
This medium severity vulnerability with a CVSS score of 5.5 was published on 2026-11-06 via NVD.
vulnfeed aggregates 16326 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.