CVE-2024-57152: Winterchens My-Site

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class

Affected products

• Winterchens My-Site: version 1.0.2 only

Published 2025-08-20. Last modified 2026-06-17.