| 标题 | https://gitee.com/baseweb/JSite JSite 1.0 Improper Access Control |
|---|
| 描述 | The built-in Apache Druid monitoring console of JSite 1.0 is not properly configured for access control, which allows attackers to directly access sensitive interfaces without authentication. Attackers can directly access the Druid console path druid/index.html to obtain sensitive information. |
|---|
| 来源 | ⚠️ https://github.com/caigo8/CVE-md/blob/main/JSite/durid%E6%9C%AA%E6%8E%88%E6%9D%83.md |
|---|
| 用户 | Caigo (UID 81287) |
|---|
| 提交 | 2025-04-09 03時43分 (2 年前) |
|---|
| 管理 | 2025-04-18 04時44分 (9 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 305613 [baseweb JSite 1.0 Apache Druid Monitoring Console /druid/index.html 权限提升] |
|---|
| 积分 | 17 |
|---|