Submeter #554572: https://gitee.com/baseweb/JSite JSite 1.0 Improper Access Controlinformação

Títulohttps://gitee.com/baseweb/JSite JSite 1.0 Improper Access Control
DescriçãoThe built-in Apache Druid monitoring console of JSite 1.0 is not properly configured for access control, which allows attackers to directly access sensitive interfaces without authentication. Attackers can directly access the Druid console path druid/index.html to obtain sensitive information.
Fonte⚠️ https://github.com/caigo8/CVE-md/blob/main/JSite/durid%E6%9C%AA%E6%8E%88%E6%9D%83.md
Utilizador
 Caigo (UID 81287)
Submissão09/04/2025 03h43 (há 1 Ano)
Moderação18/04/2025 04h44 (9 days later)
EstadoAceite
Entrada VulDB305613 [baseweb JSite 1.0 Apache Druid Monitoring Console /druid/index.html Elevação de Privilégios]
Pontos17

Do you know our Splunk app?

Download it now for free!