| Название | KuERP KuERP <=1.0.4 Significant information leak |
|---|
| Описание | The KuERP System, version 1.4.20 and below, has a significant information leak vulnerability. The system saves logs with sensitive data, such as request parameters, into the /runtime/log folder using the date as the file name, which can be directly accessed. This exposed information can potentially be exploited by malicious actors to gain unauthorized access to the system. |
|---|
| Источник | ⚠️ https://note.zhaoj.in/share/mhLwGOcLxYfP |
|---|
| Пользователь | glzjin (UID 59815) |
|---|
| Представление | 21.01.2024 10:01 (3 лет назад) |
|---|
| Модерация | 28.01.2024 16:27 (7 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 252252 [Sichuan Yougou Technology KuERP до 1.0.4 /runtime/log эскалация привилегий] |
|---|
| Баллы | 18 |
|---|