| Title | lceCMS v 2.0.1 json web token vertical override |
|---|
| Description | IceCMS is a content management system based on Spring Boot+Vue front-end and back-end separation.
IceCMS version v2.0.1 has an unauthorized access level, located at the administrator delete article. By replacing the token, ordinary users can achieve the permission of the administrator user, which is used to delete the article, and the deletion of the article is identified by the ID, and the ID of the article can be modified to delete the corresponding article. |
|---|
| Source | ⚠️ http://x.x.x.x/jwt/wen/1.html |
|---|
| User | zero121 (UID 59411) |
|---|
| Submission | 12/05/2023 16:41 (3 years ago) |
|---|
| Moderation | 12/13/2023 08:40 (8 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 247890 [Thecosy IceCMS 2.0.1 Article DelectArticleById permission] |
|---|
| Points | 20 |
|---|