CVE-2025-4036: 201206030 Novel Chapter AuthorController.java updateBookChapter access control
First published: Mon Apr 28 2025(Updated: )
A vulnerability was found in 201206030 Novel 3.5.0 and classified as critical. This issue affects the function updateBookChapter of the file src/main/java/io/github/xxyopen/novel/controller/author/AuthorController.java of the component Chapter Handler. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| 201206030 Novel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-4036?
CVE-2025-4036 is classified as a critical vulnerability.
Which component is affected by CVE-2025-4036?
CVE-2025-4036 affects the Chapter Handler found in the AuthorController.java file.
What function in CVE-2025-4036 is linked to the vulnerability?
The vulnerability in CVE-2025-4036 is associated with the updateBookChapter function.
How can I determine if I am affected by CVE-2025-4036?
You may be affected by CVE-2025-4036 if you are using the 201206030 Novel version 3.5.0.
What are the potential impacts of exploiting CVE-2025-4036?
Exploiting CVE-2025-4036 can lead to improper manipulation within the chapter handling functionality.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/severity
- agent/author
- agent/event
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/201206030
- canonical/201206030 novel