| शीर्षक | fuzui StudentInfo 1.0-SNAPSHOT Authorization bypass |
|---|
| विवरण | StudentInfo 1.0-SNAPSHOT (SSM-based student information management system, no longer maintained) is affected by an authorization bypass (IDOR) vulnerability in the password change endpoints. The endpoints GET /StudentInfo/StudentHandler/moditypasswordstu/{sid} and GET /StudentInfo/TeacherHandler/moditypassword/{tid} directly use the URL path identifier as the update target without verifying it matches the current logged-in session user, and without requiring the original password. Any logged-in low-privilege student or teacher can change the password of any other student or teacher and then log in with the new password to fully take over the account. The endpoints accept GET requests and have no CSRF protection, so they can be triggered simply by a victim visiting a malicious link. Project homepage: https://github.com/fuzui/StudentInfo |
|---|
| स्रोत | ⚠️ https://github.com/fuzui/StudentInfo |
|---|
| उपयोगकर्ता | pusa1 (UID 100448) |
|---|
| सबमिशन | 08/08/2026 04:30 AM (2 महीनों पहले) |
|---|
| संयम | 27/09/2026 10:34 AM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 410847 [fuzui StudentInfo तक fcc42a639ec7cef620651bfd0f07ebb660529e3f Password Change Endpoint moditypasswordstu sid/tid अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|