| 标题 | YXJ2018 Examination system 1.0 Any user password modification |
|---|
| 描述 | Any vulnerability in the password modification function of any user will lead to serious security risks. Attackers can use this to completely take over user accounts, steal sensitive data, escalate permissions, or perform malicious operations, which will not only cause data leakage and business losses, but may also lead to legal prosecution and reputation crisis. Such vulnerabilities usually arise from defects in the verification mechanism or insufficient permission control, and must be prevented by strengthening security measures such as identity authentication and operation auditing. |
|---|
| 来源 | ⚠️ https://github.com/YXJ2018/SpringBoot-Vue-OnlineExam/issues/74 |
|---|
| 用户 | lingmeng (UID 83892) |
|---|
| 提交 | 2025-04-11 05時43分 (1 年前) |
|---|
| 管理 | 2025-04-21 15時48分 (10 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 305776 [YXJ2018 SpringBoot-Vue-OnlineExam 1.0 /api/studentPWD studentId 弱身份验证] |
|---|
| 积分 | 20 |
|---|