Emiya

**Name of the Vulnerable Software and Affected Versions** TooTallNate Java-WebSocket versions prior to 1.6.2 **Description** A remote attacker can cause excessive allocation of resources by manipulating the `processFrameContinuousAndNonFin()` function within the Fragmentation Handler component, specifically in the `Draft 6455.java` file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** wxiaoqi Spring-Cloud-Platform versions 3.0.1 through 3.1.0 **Description** An issue in the Permission Service component allows for missing authorization. This occurs within the `PermissionService.checkUserPermission()` function located in the `/rpc/service/PermissionService.java` file, enabling remote exploitation. **Recommendations** As a temporary workaround, consider restricting the use of the `PermissionService.checkUserPermission()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** wxiaoqi Spring-Cloud-Platform version 1.0 wxiaoqi Spring-Cloud-Platform version 2.2 wxiaoqi Spring-Cloud-Platform version 3.0 **Description** A security flaw allows remote attackers to bypass authorization. The issue resides in the `getOnlineInfo()` function within the `OnlineController.java` file located at `aceModules/ace-admin/auth/controller/OnlineController.java`. **Recommendations** As a temporary workaround, consider restricting access to the `getOnlineInfo()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** jaygajera17 E-commerce-project-springBoot versions up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2 **Description** An authorization bypass can be triggered remotely by manipulating the `userid` argument within the `updateUser()` function of the UserController.java file. **Recommendations** As a temporary workaround, restrict access to the `updateUser()` function until the pending pull request is accepted and merged.