| 标题 | https://gitee.com/xujiangfei/admintwo admintwo 1.0 Horizontal privilege escalation vulnerability |
|---|
| 描述 | The /user/updateSet interface of Admintwo 1.0 version has a horizontal privilege escalation vulnerability. Attackers can illegally modify the account information of other users by modifying the email parameter. The system does not verify the requester's authority and the ownership relationship of the target account. |
|---|
| 来源 | ⚠️ https://github.com/caigo8/CVE-md/blob/main/admintwo/%E6%B0%B4%E5%B9%B3%E8%B6%8A%E6%9D%83.md |
|---|
| 用户 | Caigo (UID 81287) |
|---|
| 提交 | 2025-04-02 05時21分 (2 年前) |
|---|
| 管理 | 2025-04-04 09時35分 (2 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 303326 [xujiangfei admintwo 1.0 /user/updateSet email 权限提升] |
|---|
| 积分 | 18 |
|---|