Mingyuefusu Tushuguanlixitong Backend Broken Access Control Vulnerability

A critical broken access control vulnerability has been identified in the Mingyuefusu Tushuguanlixitong (图书管理系统) application, in versions prior to the commit d4836f6b49cd0ac79a4021b15ce99ff7229d4694. The vulnerability resides in the Backend component, specifically within the doFilter function of the /admin/ directory. This issue allows unauthorized users to access any interface in the system administrator's backend, bypassing authentication altogether.

Impact

Exploitation of this vulnerability could lead to unauthorized access to administrative interfaces, allowing for potential manipulation of backend data and settings.