漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
zhuimengshaonian wisdom-education WrongBookController.java authorization
Vulnerability Description
A vulnerability was detected in zhuimengshaonian wisdom-education up to 1.0.4. The affected element is an unknown function of the file src/main/java/com/education/api/controller/student/WrongBookController.java. Performing manipulation of the argument subjectId results in authorization bypass. The attack can be initiated remotely. The exploit is now public and may be used.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
通过用户控制密钥绕过授权机制
Vulnerability Title
wisdom-education 安全漏洞
Vulnerability Description
wisdom-education是zhuimengshaonian个人开发者的一款云智能教育平台。 wisdom-education 1.0.4及之前版本存在安全漏洞，该漏洞源于对文件src/main/java/com/education/api/controller/student/WrongBookController.java中参数subjectId的错误操作，可能导致授权绕过。
CVSS Information
N/A
Vulnerability Type
N/A