CVE-2026-110763Published
lamp-boot 4.16.0-java17 through 4.21.2-java17 IDOR via /anyone/findDeptByCompany
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-110763 · Microsoft / collected KEV context
cve-program · CVE-2026-110763
- https://hackmd.io/@hieuPenguinnn/lamp-boot-finddeptbycompany-employee-idor
- https://github.com/zuihou/lamp-boot/blob/ddef8c71de970b915ba1b15e0e9c2dd7414074de/lamp-oauth/lamp-oauth-controller/src/main/java/top/tangyh/lamp/oauth/controller/UserInfoController.java#L167
- https://github.com/zuihou/lamp-boot
- https://www.vulncheck.com/advisories/lamp-boot-4.16.0-java17-through-4.21.2-java17-idor-via-anyone-finddeptbycompany
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.