| عنوان | macrozheng(https://github.com/macrozheng) mall(https://github.com/macrozheng/mall) <=1.0.3 Generation of Incorrect Security Tokens |
|---|
| الوصف | The MALL is vulnerable to authentication bypass in versions up to, and including, 1.0.3. Attackers can use the default key and common accounts to generate JWT tokens, thereby bypassing authentication and directly gaining access to the system. |
|---|
| المصدر | ⚠️ https://github.com/macrozheng/mall/issues/880 |
|---|
| المستخدم | HeddaZhu (UID 77741) |
|---|
| ارسال | 15/11/2024 04:15 AM (2 سنوات منذ) |
|---|
| الاعتدال | 22/11/2024 02:03 PM (7 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 285842 [macrozheng mall حتى 1.0.3 JWT Token تنفيذ التعليمات البرمجية عن بُعد] |
|---|
| النقاط | 16 |
|---|