| Название | macrozheng(https://github.com/macrozheng) mall(https://github.com/macrozheng/mall) <=1.0.3 Generation of Incorrect Security Tokens |
|---|
| Описание | The MALL is vulnerable to authentication bypass in versions up to, and including, 1.0.3. Attackers can use the default key and common accounts to generate JWT tokens, thereby bypassing authentication and directly gaining access to the system. |
|---|
| Источник | ⚠️ https://github.com/macrozheng/mall/issues/880 |
|---|
| Пользователь | HeddaZhu (UID 77741) |
|---|
| Представление | 15.11.2024 04:15 (2 лет назад) |
|---|
| Модерация | 22.11.2024 14:03 (7 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 285842 [macrozheng mall до 1.0.3 JWT Token Удалённое выполнение кода] |
|---|
| Баллы | 16 |
|---|