A vulnerability exists in the BookServiceImpl component of the novel application, allowing an attacker to manipulate the chapterId parameter in the getBookChapter request. By supplying a crafted chapterId, an attacker can bypass the intended authorization checks and access book chapters that should be restricted. This flaw results in an unauthorized disclosure of potentially sensitive content.

Vendors affected are 201206030 and xxyopen, both offering a product named novel. Any installation of novel version 3.5.0 or earlier is vulnerable. The flaw resides in the getBookChapter method located in src/main/java/io/github/xxyopen/novel/service/impl/BookServiceImpl.java. Upgrading beyond 3.5.0 or applying the published patch resolves the issue.

With a CVSS score of 5.3, the vulnerability presents a moderate risk. The exploit is known and publicly available, and the attack can be carried out remotely by manipulating a request parameter. The EPSS score is currently not available, and the vulnerability is not listed in the CISA KEV catalog. Because the vulnerability provides an authorization bypass, an attacker could potentially gain access to content not intended for them, affecting confidentiality of the protected material.