| Titre | Keytop 路内停车收费系统 V2.7.1 Sensitive Data Exposure |
|---|
| Description | For detailed information, please refer to: https://github.com/K-mxredo/MXdocument/wiki
A Sensitive Data Exposure vulnerability exists in the "路内停车收费系统 V2.7.1",.The system's API is vulnerable to unauthorized access, allowing unauthenticated users to exploit certain interfaces and retrieve sensitive user data posing a critical security risk.
The primary impacted interface(s) are：saas/commonApi/park/getParks、saas/user/searchUser |
|---|
| La source | ⚠️ https://github.com/K-mxredo/MXdocument/wiki |
|---|
| Utilisateur | SecHZredo (UID 81966) |
|---|
| Soumission | 08/03/2025 08:49 (il y a 1 Année) |
|---|
| Modérer | 16/03/2025 18:18 (8 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 299887 [Keytop 路内停车收费系统 2.7.1 API getParks authentification faible] |
|---|
| Points | 20 |
|---|