| शीर्षक | macrozheng(https://github.com/macrozheng) mall(https://github.com/macrozheng/mall) <=1.0.3 Generation of Incorrect Security Tokens |
|---|
| विवरण | The MALL is vulnerable to authentication bypass in versions up to, and including, 1.0.3. Attackers can use the default key and common accounts to generate JWT tokens, thereby bypassing authentication and directly gaining access to the system. |
|---|
| स्रोत | ⚠️ https://github.com/macrozheng/mall/issues/880 |
|---|
| उपयोगकर्ता | HeddaZhu (UID 77741) |
|---|
| सबमिशन | 15/11/2024 04:15 AM (2 साल पहले) |
|---|
| संयम | 22/11/2024 02:03 PM (7 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 285842 [macrozheng mall तक 1.0.3 JWT Token दूरस्थ कोड निष्पादन] |
|---|
| अंक | 16 |
|---|