| عنوان | https://gitee.com/xujiangfei/admintwo admintwo 1.0 Horizontal privilege escalation vulnerability |
|---|
| الوصف | The /user/updateSet interface of Admintwo 1.0 version has a horizontal privilege escalation vulnerability. Attackers can illegally modify the account information of other users by modifying the email parameter. The system does not verify the requester's authority and the ownership relationship of the target account. |
|---|
| المصدر | ⚠️ https://github.com/caigo8/CVE-md/blob/main/admintwo/%E6%B0%B4%E5%B9%B3%E8%B6%8A%E6%9D%83.md |
|---|
| المستخدم | Caigo (UID 81287) |
|---|
| ارسال | 02/04/2025 05:21 AM (2 سنوات منذ) |
|---|
| الاعتدال | 04/04/2025 09:35 AM (2 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 303326 [xujiangfei admintwo 1.0 /user/updateSet email تجاوز الصلاحيات] |
|---|
| النقاط | 18 |
|---|