| عنوان | moxi159753 mogu_blog_v2 <=v5.2 Broken Access Control / Missing Authorization |
|---|
| الوصف | mogu_blog_v2, a microservice-based blog system, contains a broken access control vulnerability in the storage management endpoints /storage/initStorageSize and /storage/editStorageSize. The Spring Security configuration permits unauthenticated access to /storage/** endpoints, and the controller methods accept adminUid as a client-controlled request parameter without authentication or authorization checks. The service layer directly queries and modifies storage quota records in the database based solely on the provided adminUid value. This allows unauthenticated attackers to arbitrarily manipulate storage quotas for any administrator account by setting maxStorageSize to zero (causing denial of service) or to excessively large values (enabling unauthorized storage expansion and potential resource exhaustion). The vulnerability completely bypasses storage quota management and can lead to service disruption and business logic abuse. |
|---|
| المصدر | ⚠️ https://github.com/Xzzz111/exps/blob/main/archives/mogu_blog_v2-broken_access_control-1/report.md |
|---|
| المستخدم | sh7err04 (UID 92493) |
|---|
| ارسال | 10/11/2025 02:31 PM (11 أشهر منذ) |
|---|
| الاعتدال | 30/11/2025 08:51 PM (20 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 333822 [moxi159753 Mogu Blog v2 حتى 5.2 Storage Management Endpoint /storage/ تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|