Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in rymcu forest thru commit f782e85 (2025-09-04) in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete arbitrary users posts.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
forest 安全漏洞
Vulnerability Description
forest是RYMCU开源的一款现代化的知识社区后台项目，使用 SpringBoot + Shiro + MyBatis + JWT + Redis 实现。 forest f782e85版本存在安全漏洞，该漏洞源于AuthorshipAspect.java文件中doBefore函数存在缺陷，可能导致授权攻击者删除任意用户帖子。
CVSS Information
N/A
Vulnerability Type
N/A