https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-53496.htmlhttps://patchthecve.com/cve/CVE-2024-53496.htmlWed, 17 Jun 2026 08:08:56 +0000CRITICAL 9.8: Incorrect access control in the doFilter function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication.https://patchthecve.com/cve/CVE-2024-57152.htmlhttps://patchthecve.com/cve/CVE-2024-57152.htmlWed, 17 Jun 2026 08:13:19 +0000HIGH 7.5: Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor classhttps://patchthecve.com/cve/CVE-2024-53495.htmlhttps://patchthecve.com/cve/CVE-2024-53495.htmlWed, 17 Jun 2026 08:08:56 +0000HIGH 7.5: Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication.https://patchthecve.com/cve/CVE-2025-50904.htmlhttps://patchthecve.com/cve/CVE-2025-50904.htmlWed, 17 Jun 2026 09:35:26 +0000CRITICAL 9.8: There is an authentication bypass vulnerability in WinterChenS my-site thru commit 6c79286 (2025-06-11). An attacker can exploit this vulnerability to access /admin/ API without any token.https://patchthecve.com/cve/CVE-2025-8838.htmlhttps://patchthecve.com/cve/CVE-2025-8838.htmlWed, 17 Jun 2026 10:07:45 +0000HIGH 7.3: A vulnerability has been found in WinterChenS my-site up to 1f7525f15934d9d6a278de967f6ec9f1757738d8. This vulnerability affects the function preHandle of the file /admin/ of the component Backend Interface. The manipulation of the argument uri leads to improper authentication. The attack can be ini