| タイトル | SourceCodester Pet Grooming Management Software 1.0 Improper Authorization |
|---|
| 説明 | The application fails to enforce server-side role-based access control on financial reporting endpoints. A low-privileged authenticated user can access and view sensitive financial data, including tax reports, profit reports, invoice details, and user reports. The system does not validate user role before rendering these pages. |
|---|
| ソース | ⚠️ https://github.com/hiranerakkot/Pet-Grooming-Software/blob/main/Vulnerability_2.md |
|---|
| ユーザー | Hiran (UID 95719) |
|---|
| 送信 | 2026年02月25日 12:55 (7 月 ago) |
|---|
| モデレーション | 2026年03月07日 19:11 (10 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 349716 [SourceCodester Pet Grooming Management Software 1.0 Financial Report Page 特権昇格] |
|---|
| ポイント | 18 |
|---|