CB Project CVLand Authorization Bypass Vulnerability Allowing Parameter Injection

A vulnerability allowing authorization bypass through user-controlled keys has been identified in CB Project CVLand versions 2.1.0 to 20251103. This issue enables parameter injection, potentially allowing cyber attackers to exploit the vulnerability for their attacks.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed on behalf of a user, potentially allowing for further attacks or exploitation of the application.

Remediation

Due to the discontinuation of the product and lack of support, the National Cyber Incident Response Center (USOM) advises users and system administrators to switch to alternative software.