CVE-2026-123677
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
A vulnerability was found in xxyopen/201206030 novel up to version 3.5.0 in the getBookChapter function of BookServiceImpl.java, which handles book chapter reading. Manipulating the chapterId argument results in an authorization bypass, and the attack can be launched remotely. The exploit has been publicly disclosed and may be used.
Risk Assessment
A remote attacker could access book chapter content they are not authorized to view, breaking access controls in the application. The public availability of the exploit increases the likelihood of practical abuse.
Recommendation
Install patch b8134e774820e0971fa9d8074405b49a01c99bdc or upgrade the application to a version that includes the fix as soon as possible.
Other vulnerabilities in novel
See all- CVE-2026-123676Medium
A vulnerability has been found in xxyopen/201206030 novel up to version 3.5.0 in the BookServiceImpl.getBookContentAbout function of BookServiceImpl.java, which handles book content. Manipulating the chapterId argument leads to improper authorization, and the attack can be launched remotely. The exploit has been disclosed to the public and may be used.
- CVE-2025-65442Medium
A DOM-based Cross-Site Scripting (XSS) vulnerability in novel V3.5.0 (201206030) allows remote attackers to execute arbitrary JavaScript code or disclose sensitive information (e.g., user session cookies) via a crafted "wvstest" parameter in the URL or malicious script injection into window.localStorage. The issue arises from insufficient validation and encoding of user-controllable data in the book comment module: unfiltered user input is stored in the backend database (book_comment table, commentContent field) and returned via API, then rendered directly into the page DOM via Vue 3's v-html directive without sanitization.
Original NVD description (English source)
A vulnerability was found in xxyopen/201206030 novel up to 3.5.0. Affected is the function getBookChapter of the file src/main/java/io/github/xxyopen/novel/service/impl/BookServiceImpl.java of the component Book Chapter Read Handler. Performing a manipulation of the argument chapterId results in authorization bypass. The attack may be initiated remotely. The exploit has been made public and could be used. The patch is named b8134e774820e0971fa9d8074405b49a01c99bdc. It is suggested to install a patch to address this issue.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS