| शीर्षक | MineAdmin MineAdmin Enterprise Backend Management System MineAdmin v1.x MineAdmin v2.x Logical flaw and vulnerability |
|---|
| विवरण | There is a logic flaw vulnerability (Vertical Privilege Escalation) at /system/cache/view. Although the view interface requires login, it lacks specific permission identifiers. Attackers can bypass the system through vertical privilege escalation and directly access the Redis cache. Through the cache information, high-risk sensitive information such as administrator tokens, all user tokens, and crontabs can be viewed. |
|---|
| स्रोत | ⚠️ https://github.com/SourByte05/MineAdmin-Vulnerability/issues/6 |
|---|
| उपयोगकर्ता | sourbyte (UID 94279) |
|---|
| सबमिशन | 08/01/2026 09:54 AM (9 महीनों पहले) |
|---|
| संयम | 19/01/2026 03:00 PM (11 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 341778 [MineAdmin 1.x/2.x View Interface /system/cache/view अधिकार वृद्धि] |
|---|
| अंक | 19 |
|---|