JIZHICMS Improper Authorization Vulnerability in Article Handler Component

An improper authorization vulnerability has been identified in JIZHICMS versions through 1.7.0. This issue resides in the Article Handler component, specifically within the file '/user/release.html'. The vulnerability allows unauthorized users to access and modify articles that do not belong to them. The flaw can be exploited remotely, and details of the vulnerability, along with a public exploit, are available.

Impact

Exploitation of this vulnerability allows for unauthorized access and modification of articles, potentially leading to integrity issues.

Reproduction

To reproduce this vulnerability, access the '/user/release.html' page without proper authorization. Once on the page, it is possible to edit and modify articles that belong to other users, bypassing the intended access controls.