| शीर्षक | freeebird hotel 1.2 branch Permissive Cross-domain Policy with Untrusted Domains |
|---|
| विवरण | The server’s CORS implementation reflects the client-supplied Origin header verbatim into Access-Control-Allow-Origin without any whitelist validation, while also enabling Access-Control-Allow-Credentials: true. This allows any malicious origin to make authenticated cross-origin requests and read sensitive responses.
Project Link: https://github.com/freeebird/hotel
Affected Version: 1.2 branch
Affected API: apis start with http://localhost:8080/ho-api such as http://localhost:8080/ho-api/user/profile
Code Location: /src/main/java/cn/mafangui/hotel/tool/SessionInterceptor.java:35 |
|---|
| स्रोत | ⚠️ https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250429-01.md |
|---|
| उपयोगकर्ता | ShenxiuSecurity (UID 84374) |
|---|
| सबमिशन | 29/04/2025 03:08 PM (1 वर्ष पहले) |
|---|
| संयम | 10/05/2025 03:48 PM (11 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 308288 [Freeebird Hotel 酒店管理系统 API तक 1.2 SessionInterceptor.java अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|