| 标题 | lceCMS v 2.0.1 json web token vertical override |
|---|
| 描述 | IceCMS is a content management system based on Spring Boot+Vue front-end and back-end separation.
IceCMS version v2.0.1 has an unauthorized access level, located at the administrator delete article. By replacing the token, ordinary users can achieve the permission of the administrator user, which is used to delete the article, and the deletion of the article is identified by the ID, and the ID of the article can be modified to delete the corresponding article. |
|---|
| 来源 | ⚠️ http://x.x.x.x/jwt/wen/1.html |
|---|
| 用户 | zero121 (UID 59411) |
|---|
| 提交 | 2023-12-05 16時41分 (3 年前) |
|---|
| 管理 | 2023-12-13 08時40分 (8 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 247890 [Thecosy IceCMS 2.0.1 Article DelectArticleById 权限提升] |
|---|
| 积分 | 20 |
|---|