إرسال #247962: lceCMS v 2.0.1 json web token vertical overrideالمعلومات

عنوانlceCMS v 2.0.1 json web token vertical override
الوصفIceCMS is a content management system based on Spring Boot+Vue front-end and back-end separation. IceCMS version v2.0.1 has an unauthorized access level, located at the administrator delete article. By replacing the token, ordinary users can achieve the permission of the administrator user, which is used to delete the article, and the deletion of the article is identified by the ID, and the ID of the article can be modified to delete the corresponding article.
المصدر⚠️ http://x.x.x.x/jwt/wen/1.html
المستخدم
 zero121 (UID 59411)
ارسال05/12/2023 04:41 PM (3 سنوات منذ)
الاعتدال13/12/2023 08:40 AM (8 days later)
الحالةتمت الموافقة
إدخال VulDB247890 [Thecosy IceCMS 2.0.1 Article DelectArticleById تجاوز الصلاحيات]
النقاط20

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!