CVE-2026-123676 | xxyopen/201206030 novel up to 3.5.0 Book Content Service BookServiceImpl.java BookServiceImpl.getBookContentAbout chapterId improper authorization (ID 52)

November 6, 2026 Yanac

A vulnerability was found in xxyopen/201206030 novel up to 3.5.0 and classified as problematic. This impacts the function BookServiceImpl.getBookContentAbout of the file src/main/java/io/github/xxyopen/novel/service/impl/BookServiceImpl.java of the component Book Content Service. Such manipulation of the argument chapterId leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-123676. The attack can be launched remotely. Moreover, an exploit is present.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More