| Название | https://gitee.com/baseweb/JSite JSite 1.0 Improper Access Control |
|---|
| Описание | The built-in Apache Druid monitoring console of JSite 1.0 is not properly configured for access control, which allows attackers to directly access sensitive interfaces without authentication. Attackers can directly access the Druid console path druid/index.html to obtain sensitive information. |
|---|
| Источник | ⚠️ https://github.com/caigo8/CVE-md/blob/main/JSite/durid%E6%9C%AA%E6%8E%88%E6%9D%83.md |
|---|
| Пользователь | Caigo (UID 81287) |
|---|
| Представление | 09.04.2025 03:43 (1 Год назад) |
|---|
| Модерация | 18.04.2025 04:44 (9 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 305613 [baseweb JSite 1.0 Apache Druid Monitoring Console /druid/index.html эскалация привилегий] |
|---|
| Баллы | 17 |
|---|