| 제목 | https://github.com/getmaxun https://github.com/getmaxun/maxun ≤ v0.0.28 Authentication Bypass Issues |
|---|
| 설명 | In versions of maxun prior to 0.0.29, the /auth/user/ interface contained an IODR vulnerability, allowing any legitimate user to bypass authentication by iterating through all user information, effectively granting administrator privileges. |
|---|
| 원천 | ⚠️ https://gist.github.com/H2u8s/1a0bdb19d5c8c8f4dc72cb49ffe9a22b |
|---|
| 사용자 | 28Hus (UID 92415) |
|---|
| 제출 | 2025. 12. 09. PM 03:26 (6 개월 ago) |
|---|
| 모더레이션 | 2025. 12. 26. PM 07:11 (17 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 338477 [getmaxun 까지 0.0.28 Authentication Endpoint auth.ts router.get 권한 상승] |
|---|
| 포인트들 | 16 |
|---|