Open-source package vulnerability · Maven
CVE-2025-45616: BRCC Incorrect Access Control vulnerability
criticalCVSS 3.1 9.8GHSA-w7xj-pj5f-8pwh
Incorrect access control in the /admin/ API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request.
Published May 5, 2025 · Updated May 6, 2025
Affected packages
com.baidu.mapp:brcc-core
- Ecosystem
- Maven
- Affected
- <= 1.2.0
- Fixed in
- No patched version yet
- Check
mvn dependency:tree -Dincludes=com.baidu.mapp:brcc-core
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
Incorrect access control in the /admin/** API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology