إرسال #710268: https://github.com/getmaxun https://github.com/getmaxun/maxun ≤ v0.0.28 Authentication Bypass Issuesالمعلومات

عنوانhttps://github.com/getmaxun https://github.com/getmaxun/maxun ≤ v0.0.28 Authentication Bypass Issues
الوصفIn versions of maxun prior to 0.0.29, the /auth/user/ interface contained an IODR vulnerability, allowing any legitimate user to bypass authentication by iterating through all user information, effectively granting administrator privileges.
المصدر⚠️ https://gist.github.com/H2u8s/1a0bdb19d5c8c8f4dc72cb49ffe9a22b
المستخدم
 28Hus (UID 92415)
ارسال09/12/2025 03:26 PM (10 أشهر منذ)
الاعتدال26/12/2025 07:11 PM (17 days later)
الحالةتمت الموافقة
إدخال VulDB338477 [getmaxun حتى 0.0.28 Authentication Endpoint auth.ts router.get تجاوز الصلاحيات]
النقاط16

Want to stay up to date on a daily basis?

Enable the mail alert feature now!