{"id":"CVE-2026-71241","published":"2026-08-05T11:16:26.997","lastModified":"2026-08-10T12:17:26.633","description":"Book-Management-System's Flask API endpoints /student, /record, /books, /find_stu_book, and /find_not_return_book are missing the @login_required decorator that protects sibling routes (/search_student, /storage) in the same file. Because card_id values are sequential integers, the entire student database can be enumerated without authentication.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://github.com/lyric777/Book-Management-System","tags":[]}],"exploitRefs":[{"url":"https://github.com/lyric777/Book-Management-System","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw allows unauthorized access to sensitive API endpoints by enumerating card_id values, compromising user data security.","exploitability":"Exploitation is relatively easy due to sequential card_id values and missing authentication checks.","blast_radius":"If exploited, it could lead to full enumeration of the student database, posing a significant risk to user privacy.","remediation":"Apply the @login_required decorator to all relevant API endpoints to enforce proper authentication.","tags":["auth-bypass","api-security","web","enumeration"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-08-11T06:59:16.319Z"}}