| 제목 | moxi159753 mogu_blog_v2 <=v5.2 Broken Access Control / Missing Authorization |
|---|
| 설명 | mogu_blog_v2, a microservice-based blog system, contains a broken access control vulnerability in the storage management endpoints /storage/initStorageSize and /storage/editStorageSize. The Spring Security configuration permits unauthenticated access to /storage/** endpoints, and the controller methods accept adminUid as a client-controlled request parameter without authentication or authorization checks. The service layer directly queries and modifies storage quota records in the database based solely on the provided adminUid value. This allows unauthenticated attackers to arbitrarily manipulate storage quotas for any administrator account by setting maxStorageSize to zero (causing denial of service) or to excessively large values (enabling unauthorized storage expansion and potential resource exhaustion). The vulnerability completely bypasses storage quota management and can lead to service disruption and business logic abuse. |
|---|
| 원천 | ⚠️ https://github.com/Xzzz111/exps/blob/main/archives/mogu_blog_v2-broken_access_control-1/report.md |
|---|
| 사용자 | sh7err04 (UID 92493) |
|---|
| 제출 | 2025. 11. 10. PM 02:31 (11 개월 ago) |
|---|
| 모더레이션 | 2025. 11. 30. PM 08:51 (20 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 333822 [moxi159753 Mogu Blog v2 까지 5.2 Storage Management Endpoint /storage/ 권한 상승] |
|---|
| 포인트들 | 20 |
|---|