提交 #580729: XiaoBingby TeaCMS 2.0.2 CSRF
| 标题 | XiaoBingby TeaCMS 2.0.2 CSRF |
|---|---|
| 描述 | In src/main/java/me/teacms/controller/admin/UserManageController/addUser, the method didn't verify legitimacy of the request, which cause unexpected addition of highly authorized user |
| 来源 | ⚠️ https:/ |
| 用户 | electroN1c (UID 85481) |
| 提交 | 2025-05-19 16時01分 (1 年前) |
| 管理 | 2025-05-21 13時02分 (2 days later) |
| 状态 | 已接受 |
| VulDB条目 | 309853 [XiaoBingby TeaCMS 2.0.2 addUser 跨网站请求伪造] |
| 积分 | 15 |