| Titolo | https://gitee.com/baseweb/JSite JSite 1.0 Improper Access Control |
|---|
| Descrizione | The built-in Apache Druid monitoring console of JSite 1.0 is not properly configured for access control, which allows attackers to directly access sensitive interfaces without authentication. Attackers can directly access the Druid console path druid/index.html to obtain sensitive information. |
|---|
| Fonte | ⚠️ https://github.com/caigo8/CVE-md/blob/main/JSite/durid%E6%9C%AA%E6%8E%88%E6%9D%83.md |
|---|
| Utente | Caigo (UID 81287) |
|---|
| Sottomissione | 09/04/2025 03:43 (1 Anno fa) |
|---|
| Moderazione | 18/04/2025 04:44 (9 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 305613 [baseweb JSite 1.0 Apache Druid Monitoring Console /druid/index.html escalationi di privilegi] |
|---|
| Punti | 17 |
|---|