Vulnerability · Published Sep 13, 2026 · Assigned by VulDB

CVE-2026-90520jaychouchannel Tourism-Management-System Authorization Interceptor AuthorizationInterceptor.java improper authorization

Medium 6.3

In plain English

A medium-severity security flaw in Tourism-Management-System from jaychouchannel. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)0.4%top 69.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293bb7b477efa64. This vulnerability affects unknown code of the file AuthorizationInterceptor.java of the component Authorization Interceptor. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The identifier of the patch is d984d172dceca907f8b447efbdb06dc233f7938d. Applying a patch is the recommended action to fix this issue.

Affected products (as reported)

Vendor	Product	Versions
jaychouchannel	Tourism-Management-System	84d8ec384f669df3985293dab293bb7b477efa64

Weakness: CWE-285, CWE-266 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

References

VDB-403110 | jaychouchannel Tourism-Management-System Authorization Interceptor AuthorizationInterceptor.java improper authorization vdb-entry
VDB-403110 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
CVE-2026-90520 | CVE Analysis and Report third-party-advisory
Submit #912234 | jaychouchannel Tourism_Management_System 8122bf020d91199eddfff3ee02d1632a70a9a132 Improper Authorization third-party-advisory
https://github.com/jaychouchannel/Tourism-Management-System/issues/12 exploit, issue-tracking
https://github.com/jaychouchannel/Tourism-Management-System/commit/d984d172dceca907f8b447efbdb06dc233f7938d patch
https://github.com/jaychouchannel/Tourism-Management-System/ product