| शीर्षक | yeqifu warehouse latest(git commit aaf29962ba407d22d991781de28796ee7b4670e4) Improper Access Controls |
|---|
| विवरण | Menu create/update/delete endpoints have no authorization checks. Attackers can alter the UI navigation tree, hide critical functions from legitimate users, or expose admin functions to unauthorized users if the frontend relies on menu visibility as a security boundary. |
|---|
| स्रोत | ⚠️ https://github.com/yeqifu/warehouse/issues/56 |
|---|
| उपयोगकर्ता | AliceS614 (UID 94277) |
|---|
| सबमिशन | 23/01/2026 10:46 AM (8 महीनों पहले) |
|---|
| संयम | 06/02/2026 08:57 AM (14 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 344645 [yeqifu warehouse तक aaf29962ba407d22d991781de28796ee7b4670e4 Menu Management MenuController.java addMenu/updateMenu/deleteMenu अधिकार वृद्धि] |
|---|
| अंक | 17 |
|---|