| タイトル | lceCMS v 2.0.1 json web token vertical override |
|---|
| 説明 | IceCMS is a content management system based on Spring Boot+Vue front-end and back-end separation.
IceCMS version v2.0.1 has an unauthorized access level, located at the administrator delete article. By replacing the token, ordinary users can achieve the permission of the administrator user, which is used to delete the article, and the deletion of the article is identified by the ID, and the ID of the article can be modified to delete the corresponding article. |
|---|
| ソース | ⚠️ http://x.x.x.x/jwt/wen/1.html |
|---|
| ユーザー | zero121 (UID 59411) |
|---|
| 送信 | 2023年12月05日 16:41 (3 年 ago) |
|---|
| モデレーション | 2023年12月13日 08:40 (8 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 247890 [Thecosy IceCMS 2.0.1 Article DelectArticleById 特権昇格] |
|---|
| ポイント | 20 |
|---|