| शीर्षक | VBlog 1.0.0 Improper Authentication |
|---|
| विवरण | In the file blogserver/src/main/java/org/sang/config/WebSecurityConfig.java, the method configure(HttpSecurity http) configures an url access control incorrectly. The method uses "/reg" to match url but ignores patterns like "/reg/". Only admin can create user, however, users not in admin group can create user via path /reg/. |
|---|
| स्रोत | ⚠️ https://magnificent-dill-351.notion.site/Improper-Authentication-Vulnerability-in-VBlog-1-0-0-1c0c693918ed80f2ace4fff7d1d51619 |
|---|
| उपयोगकर्ता | s0l42 (UID 82389) |
|---|
| सबमिशन | 24/03/2025 03:45 AM (2 साल पहले) |
|---|
| संयम | 07/04/2025 12:05 PM (14 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 303643 [lenve VBlog तक 1.0.0 WebSecurityConfig.java configure अधिकार वृद्धि] |
|---|
| अंक | 15 |
|---|