| عنوان | macrozheng mall v1.0.1 Authorization Bypass |
|---|
| الوصف | A serious authorization bypass vulnerability exists in the mall e-commerce system. If the default JWT signing key is not changed when deploying systems based on this template, attackers can generate valid tokens using the default key to bypass authentication and authorization controls. As a result, they may gain unauthorized access and perform sensitive operations such as adding, deleting, modifying, or querying data in the affected system. |
|---|
| المصدر | ⚠️ https://github.com/fricka6768/VulSubmit/tree/main |
|---|
| المستخدم | 1940dd (UID 83805) |
|---|
| ارسال | 10/06/2025 07:58 AM (1 سنة منذ) |
|---|
| الاعتدال | 23/06/2025 02:31 PM (13 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 285842 [macrozheng mall حتى 1.0.3 JWT Token تنفيذ التعليمات البرمجية عن بُعد] |
|---|
| النقاط | 0 |
|---|