| 제목 | macrozheng mall v1.0.1 Authorization Bypass |
|---|
| 설명 | A serious authorization bypass vulnerability exists in the mall e-commerce system. If the default JWT signing key is not changed when deploying systems based on this template, attackers can generate valid tokens using the default key to bypass authentication and authorization controls. As a result, they may gain unauthorized access and perform sensitive operations such as adding, deleting, modifying, or querying data in the affected system. |
|---|
| 원천 | ⚠️ https://github.com/fricka6768/VulSubmit/tree/main |
|---|
| 사용자 | 1940dd (UID 83805) |
|---|
| 제출 | 2025. 06. 10. AM 07:58 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 06. 23. PM 02:31 (13 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 285842 [macrozheng mall 까지 1.0.3 JWT Token 원격 코드 실행] |
|---|
| 포인트들 | 0 |
|---|