Invia #548986: https://gitee.com/xujiangfei/admintwo admintwo 1.0 Improper Access Controlsinformazioni

Titolohttps://gitee.com/xujiangfei/admintwo admintwo 1.0 Improper Access Controls
DescrizioneThe unauthorized access to the /user/home interface of version 1.0 of admintwo has been identified. Attackers can obtain user information without authorization by traversing the values of the id field.
Fonte⚠️ https://github.com/caigo8/CVE-md/blob/main/admintwo/%E6%9C%AA%E6%8E%88%E6%9D%83%E7%94%A8%E6%88%B7%E4%BF%A1%E6%81%AF%E9%81%8D%E5%8E%86.md
Utente
 Caigo (UID 81287)
Sottomissione02/04/2025 04:56 (1 Anno fa)
Moderazione04/04/2025 09:35 (2 days later)
StatoAccettato
Voce VulDB303325 [xujiangfei admintwo 1.0 /user/home ID escalationi di privilegi]
Punti16

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!