| 标题 | macrozheng(https://github.com/macrozheng) mall(https://github.com/macrozheng/mall) <=1.0.3 Generation of Incorrect Security Tokens |
|---|
| 描述 | The MALL is vulnerable to authentication bypass in versions up to, and including, 1.0.3. Attackers can use the default key and common accounts to generate JWT tokens, thereby bypassing authentication and directly gaining access to the system. |
|---|
| 来源 | ⚠️ https://github.com/macrozheng/mall/issues/880 |
|---|
| 用户 | HeddaZhu (UID 77741) |
|---|
| 提交 | 2024-11-15 04時15分 (2 年前) |
|---|
| 管理 | 2024-11-22 14時03分 (7 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 285842 [macrozheng mall 直到 1.0.3 JWT Token 远程代码执行] |
|---|
| 积分 | 16 |
|---|