CVE-2025-4017: 20120630 Novel-Plus LogController.java list improper authorization
A vulnerability classified as problematic was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This vulnerability affects the function list of the file nnovel-admin/src/main/java/com/java2nb/common/controller/LogController.java. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4017?
CVE-2025-4017 is classified as a problematic vulnerability.
How does CVE-2025-4017 affect the software?
CVE-2025-4017 affects the function list in the LogController.java file of the Novel-Plus software.
What versions of Novel-Plus are affected by CVE-2025-4017?
CVE-2025-4017 affects Novel-Plus versions up to and including 0e156c04b4b7ce0563bef6c97af4476fcda8f160.
What type of manipulation is involved in CVE-2025-4017?
CVE-2025-4017 involves manipulation that could lead to potential exploitation of the LogController functionality.
What should users do to mitigate the risk of CVE-2025-4017?
Users should upgrade their Novel-Plus software to a version that is not vulnerable to CVE-2025-4017.