| 标题 | ui-lib Mentor LMS 1.1.1 Origin Validation Error |
|---|
| 描述 | A Cross-Origin Resource Sharing (CORS) vulnerability exists in Mentor Learning Management System version 1.1.1. The CORS configuration on the server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API. This affects all URLs of this product, and can lead to unauthorized data access, information disclosure, and potential further exploitation, thereby compromising the integrity and confidentiality of the system. |
|---|
| 来源 | ⚠️ https://github.com/PlsRevert/CVEs/issues/3 |
|---|
| 用户 | JaredLoo (UID 89930) |
|---|
| 提交 | 2025-09-24 08時37分 (1 年前) |
|---|
| 管理 | 2025-10-04 20時53分 (11 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 327185 [CodeCanyon/ui-lib Mentor LMS 直到 1.1.1 API 权限提升] |
|---|
| 积分 | 20 |
|---|