| Название | https://gitee.com/xujiangfei/admintwo admintwo 1.0 Improper Access Controls |
|---|
| Описание | The unauthorized access to the /user/home interface of version 1.0 of admintwo has been identified. Attackers can obtain user information without authorization by traversing the values of the id field. |
|---|
| Источник | ⚠️ https://github.com/caigo8/CVE-md/blob/main/admintwo/%E6%9C%AA%E6%8E%88%E6%9D%83%E7%94%A8%E6%88%B7%E4%BF%A1%E6%81%AF%E9%81%8D%E5%8E%86.md |
|---|
| Пользователь | Caigo (UID 81287) |
|---|
| Представление | 02.04.2025 04:56 (2 лет назад) |
|---|
| Модерация | 04.04.2025 09:35 (2 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 303325 [xujiangfei admintwo 1.0 /user/home id эскалация привилегий] |
|---|
| Баллы | 16 |
|---|