जमा करें #549009: https://gitee.com/xujiangfei/admintwo admintwo 1.0 Horizontal privilege escalation vulnerabilityजानकारी

शीर्षकhttps://gitee.com/xujiangfei/admintwo admintwo 1.0 Horizontal privilege escalation vulnerability
विवरणThe /user/updateSet interface of Admintwo 1.0 version has a horizontal privilege escalation vulnerability. Attackers can illegally modify the account information of other users by modifying the email parameter. The system does not verify the requester's authority and the ownership relationship of the target account.
स्रोत⚠️ https://github.com/caigo8/CVE-md/blob/main/admintwo/%E6%B0%B4%E5%B9%B3%E8%B6%8A%E6%9D%83.md
उपयोगकर्ता
 Caigo (UID 81287)
सबमिशन02/04/2025 05:21 AM (2 साल पहले)
संयम04/04/2025 09:35 AM (2 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि303326 [xujiangfei admintwo 1.0 /user/updateSet email अधिकार वृद्धि]
अंक18

Do you want to use VulDB in your project?

Use the official API to access entries easily!