CVE-2025-4036: 201206030 Novel Chapter AuthorController.java updateBookChapter access control
A vulnerability was found in 201206030 Novel 3.5.0 and classified as critical. This issue affects the function updateBookChapter of the file src/main/java/io/github/xxyopen/novel/controller/author/AuthorController.java of the component Chapter Handler. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4036?
CVE-2025-4036 is classified as a critical vulnerability.
Which component is affected by CVE-2025-4036?
CVE-2025-4036 affects the Chapter Handler found in the AuthorController.java file.
What function in CVE-2025-4036 is linked to the vulnerability?
The vulnerability in CVE-2025-4036 is associated with the updateBookChapter function.
How can I determine if I am affected by CVE-2025-4036?
You may be affected by CVE-2025-4036 if you are using the 201206030 Novel version 3.5.0.
What are the potential impacts of exploiting CVE-2025-4036?
Exploiting CVE-2025-4036 can lead to improper manipulation within the chapter handling functionality.