| शीर्षक | macrozheng mall Commit 0504e86 Broken Authentication |
|---|
| विवरण | A critical account takeover vulnerability exists in macrozheng mall in the mall-portal module, as present in the public GitHub codebase including commit 0504e86. The /sso/getAuthCode endpoint returns the verification code directly in the HTTP response, and the /sso/updatePassword endpoint allows password reset using only telephone, authCode, and a new password, without requiring authentication or the current password. As a result, an attacker who knows a victim's phone number can obtain the verification code and reset the victim's password. If the attacker also knows the victim's username, the attacker can then log in with the new password and fully take over the account. https://github.com/wr0ld/macrozheng-mall-Commit-0504e86-Broken-Authentication/issues/1 |
|---|
| स्रोत | ⚠️ https://github.com/wr0ld/macrozheng-mall-Commit-0504e86-Broken-Authentication/issues/1 |
|---|
| उपयोगकर्ता | wr0ld (UID 98487) |
|---|
| सबमिशन | 23/06/2026 09:55 AM (2 महीनों पहले) |
|---|
| संयम | 08/08/2026 09:03 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 387215 [macrozheng mall 0504e86 mall-portal /sso/getAuthCode अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|