| 标题 | lceCMS v 2.0.1 Horizontal Privilege Escalation |
|---|
| 描述 | IceCMS is a content management system based on Spring Boot+Vue front-end and back-end separation.
IceCMS v2.0.1 version has a level of unauthorized access, which is located in the area of personal information modification. Through a single ordinary user, multiple user information accounts and passwords can be modified. The backend code only determines identity based on userId, which is why the vulnerability arises |
|---|
| 来源 | ⚠️ http://x.x.x.x/yue/yue.html |
|---|
| 用户 | zero121 (UID 59411) |
|---|
| 提交 | 2023-12-04 16時08分 (3 年前) |
|---|
| 管理 | 2023-12-13 08時40分 (9 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 247888 [Thecosy IceCMS 直到 2.0.1 权限提升] |
|---|
| 积分 | 19 |
|---|