| 제목 | macrozheng(https://github.com/macrozheng) mall(https://github.com/macrozheng/mall) <=1.0.3 Generation of Incorrect Security Tokens |
|---|
| 설명 | The MALL is vulnerable to authentication bypass in versions up to, and including, 1.0.3. Attackers can use the default key and common accounts to generate JWT tokens, thereby bypassing authentication and directly gaining access to the system. |
|---|
| 원천 | ⚠️ https://github.com/macrozheng/mall/issues/880 |
|---|
| 사용자 | HeddaZhu (UID 77741) |
|---|
| 제출 | 2024. 11. 15. AM 04:15 (2 연령 ago) |
|---|
| 모더레이션 | 2024. 11. 22. PM 02:03 (7 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 285842 [macrozheng mall 까지 1.0.3 JWT Token 원격 코드 실행] |
|---|
| 포인트들 | 16 |
|---|