← Back to CVE List
CVE-2026-105237NVD
Vulnerability Summary
A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminAuthController.java of the component Login Endpoint. The manipulation results in improper restriction of excessive authentication attempts. The attack may be performed from remote. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
CVSS v4.0 Base Metrics — Score 6.3 (MEDIUM)
Attack VectorNetwork
Attack ComplexityHigh
Attack RequirementsNone
Privileges RequiredNone
User InteractionNone
Confidentiality (Vulnerable System)Low
Integrity (Vulnerable System)None
Availability (Vulnerable System)None
Confidentiality (Subsequent System)None
Integrity (Subsequent System)None
Availability (Subsequent System)None
CVSS v3.1 Base Metrics — Score 3.7 (LOW)
Attack VectorNetwork
Attack ComplexityHigh
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
ConfidentialityLow
IntegrityNone
AvailabilityNone
Affected & Patched Versions
- linlinjava litemall >= 1.0
- linlinjava litemall >= 1.1
- linlinjava litemall >= 1.2
- linlinjava litemall >= 1.3
- linlinjava litemall >= 1.4
- linlinjava litemall >= 1.5
- linlinjava litemall >= 1.6
- linlinjava litemall >= 1.7
- linlinjava litemall >= 1.8.0
Not provided by cveorg for this CVE.