提交 #584491: quequnlong shiyi-blog 1.2.1 Logical loopholes 2

Shiyi blogv1.2.1“/api/sys/user/verifyPassword/{password}” There is a logical vulnerability in the interface that allows hackers to bypass screen lock and access the administrator backend

• 来源: ⚠️ https://github.com/uglory-gll/javasec/blob/main/shiyi-blog.md
• 用户: uglory (UID 82151)
• 提交: 2025-05-25 12時33分 (1 年前)
• 管理: 2025-06-03 07時58分 (9 days later)
• 状态: 已接受
• VulDB条目: 310926 [quequnlong shiyi-blog 直到 1.2.1 Administrator Backend verifyPassword 弱身份验证]
• 积分: 17