| عنوان | 延禾信息 fuint门店会员营销系统 V1.0 Authorization Bypass |
|---|
| الوصف | The application contains a critical flaw in the user authentication logic where the securely generated authentication token is immediately overwritten with the user's mobile phone number. This results in an authentication bypass vulnerability that allows any attacker who knows a user's phone number to gain unauthorized access to that user's account. |
|---|
| المصدر | ⚠️ https://github.com/fushengqian/fuint/issues/67 |
|---|
| المستخدم | 1098024193 (UID 45260) |
|---|
| ارسال | 21/10/2025 05:07 AM (12 أشهر منذ) |
|---|
| الاعتدال | 02/11/2025 06:47 PM (13 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 330915 [fushengqian fuint حتى 41e26be8a2c609413a0feaa69bdad33a71ae8032 Authentication Token ClientSignController.java تجاوز الصلاحيات] |
|---|
| النقاط | 18 |
|---|