| Titel | Keytop 路内停车收费系统 V2.7.1 Sensitive Data Exposure |
|---|
| Beschreibung | For detailed information, please refer to: https://github.com/K-mxredo/MXdocument/wiki
A Sensitive Data Exposure vulnerability exists in the "路内停车收费系统 V2.7.1",.The system's API is vulnerable to unauthorized access, allowing unauthenticated users to exploit certain interfaces and retrieve sensitive user data posing a critical security risk.
The primary impacted interface(s) are：saas/commonApi/park/getParks、saas/user/searchUser |
|---|
| Quelle | ⚠️ https://github.com/K-mxredo/MXdocument/wiki |
|---|
| Benutzer | SecHZredo (UID 81966) |
|---|
| Einreichung | 08.03.2025 08:49 (vor 1 Jahr) |
|---|
| Moderieren | 16.03.2025 18:18 (8 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 299887 [Keytop 路内停车收费系统 2.7.1 API getParks schwache Authentisierung] |
|---|
| Punkte | 20 |
|---|