Soumettre #554572: https://gitee.com/baseweb/JSite JSite 1.0 Improper Access Controlinformation

Titrehttps://gitee.com/baseweb/JSite JSite 1.0 Improper Access Control
DescriptionThe built-in Apache Druid monitoring console of JSite 1.0 is not properly configured for access control, which allows attackers to directly access sensitive interfaces without authentication. Attackers can directly access the Druid console path druid/index.html to obtain sensitive information.
La source⚠️ https://github.com/caigo8/CVE-md/blob/main/JSite/durid%E6%9C%AA%E6%8E%88%E6%9D%83.md
Utilisateur
 Caigo (UID 81287)
Soumission09/04/2025 03:43 (il y a 1 Année)
Modérer18/04/2025 04:44 (9 days later)
StatutAccepté
Entrée VulDB305613 [baseweb JSite 1.0 Apache Druid Monitoring Console /druid/index.html élévation de privilèges]
Points17

Do you want to use VulDB in your project?

Use the official API to access entries easily!