| शीर्षक | Antabot White-Jotter v0.2.2 Authorization Bypass |
|---|
| विवरण | White-Jotter v0.2.2 has an authorization bypass vulnerability, allowing unauthorized users to access sensitive system information and even modify critical system data. This vulnerability compromises the confidentiality, integrity of the system. Shiro 1.4.1 is used for access control by the project. According to CVE-2020-1957, Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass. Therefore, the projects is vulnerable to authentication bypass. |
|---|
| स्रोत | ⚠️ https://github.com/Antabot/White-Jotter/issues/159 |
|---|
| उपयोगकर्ता | gaogaostone (UID 53740) |
|---|
| सबमिशन | 21/10/2024 05:08 AM (2 साल पहले) |
|---|
| संयम | 29/10/2024 06:45 PM (9 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 152286 [Apache Shiro तक 1.5.1 Spring Dynamic Controller अनुरोध कमजोर प्रमाणीकरण] |
|---|
| अंक | 0 |
|---|