| Название | lceCMS v 2.0.1 json web token vertical override |
|---|
| Описание | IceCMS is a content management system based on Spring Boot+Vue front-end and back-end separation.
IceCMS version v2.0.1 has an unauthorized access level, located at the administrator delete article. By replacing the token, ordinary users can achieve the permission of the administrator user, which is used to delete the article, and the deletion of the article is identified by the ID, and the ID of the article can be modified to delete the corresponding article. |
|---|
| Источник | ⚠️ http://x.x.x.x/jwt/wen/1.html |
|---|
| Пользователь | zero121 (UID 59411) |
|---|
| Представление | 05.12.2023 16:41 (3 лет назад) |
|---|
| Модерация | 13.12.2023 08:40 (8 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 247890 [Thecosy IceCMS 2.0.1 Article DelectArticleById эскалация привилегий] |
|---|
| Баллы | 20 |
|---|