Talelin

10 CVEs across 3 Talelin products. Browse Talelin vulnerabilities, severities, and proof-of-concept exploits.

Talelin products with known CVEs

ProductCVEs
Lin-Cms-Spring-Boot6
Lin-Cms-Flask3
Lin-Cms1
Talelin CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-96882Medium5.32026-09-24A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the function searchBook of the file src/main/java/…
CVE-2026-96881Medium5.32026-09-24A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/lattic…
CVE-2026-96880Medium5.32026-09-24A vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function getBook of the file src/main/java/io/github/talelin/latticy/con…
CVE-2026-10152Medium6.32026-05-30A vulnerability was detected in TaleLin lin-cms-spring-boot up to 0.2.1. This issue affects some unknown processing of the file src/main/java/io/github/talelin…
CVE-2025-15151Low3.72025-12-28A vulnerability was determined in TaleLin Lin-CMS up to 0.6.0. This affects an unknown part of the file /tests/config.py of the component Tests Folder. This ma…
CVE-2024-41600High7.52024-07-19Insecure Permissions vulnerability in lin-CMS Springboot v.0.2.1 and before allows a remote attacker to obtain sensitive information via the login method in th…
CVE-2022-32430High7.52022-07-21An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application.
CVE-2020-18701Critical9.82021-08-16Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not inva…
CVE-2020-18699Medium6.12021-08-16Cross Site Scripting (XSS) in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the…
CVE-2020-18698Critical9.82021-08-16Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in th…