Vulnerability Information Summary Title: yeqifu warehouse latest (git commit aaf29962ba407d22d991781de28796ee7b4670e4) Improper Access Controls Description: - Department create/update/delete endpoints lack authorization checks. Any logged-in user can modify organizational structure, impacting user grouping, reporting lines, and access controls. Source: [](https://github.com/yeqifu/warehouse/issues/57) User: AliceS614 (UID 94277) Submission Date: 01/23/2026 10:47 AM (15 days ago) Moderation Date: 02/06/2026 03:16 PM (14 days later) Status: Accepted VulDB Entry: - 2344681 (yeqifu warehouse up to commit aaf29962ba407d22d991781de28796ee7b4670e4 Department Management DeptController.java addDept/updateDept/deleteDept improper authorization) Points: 17