提交 #421516: didi DDMQ 1.0 Authorization Bypass
| 标题 | didi DDMQ 1.0 Authorization Bypass |
|---|---|
| 描述 | In DDMQ console module through all the versions, a specially crafted request may cause an authentication bypass. Attackers can add “/;login” at the tail of authorization-required urls to bypass the authentication and retrieve sensitive information. |
| 来源 | ⚠️ https:/ |
| 用户 | gaogaostone (UID 53740) |
| 提交 | 2024-10-10 09時32分 (2 年前) |
| 管理 | 2024-10-18 21時54分 (9 days later) |
| 状态 | 已接受 |
| VulDB条目 | 280957 [didi DDMQ 1.0 Console 弱身份验证] |
| 积分 | 17 |