| 标题 | NutzBoot project (Nutz community) NutzBoot (Web3j starter + demo module) NutzBoot 2.6.0-SNAPSHOT Improper Access Control (Unauthenticated transaction API) |
|---|
| 描述 | The same Web3j demo module that loads wallet credentials also provides a convenience endpoint to trigger transfers. The method performs the following steps:
Accepts from and to path segments and a wei query parameter.
Ensures the amount is 0.01–100 ether.
Fetches the Web3jAccount matching the from name and obtains its stored password.
Calls web3jAdmin.personalSendTransaction(...), which unlocks the account and sends the transaction.
No user identity is checked, and the route is accessible with an ordinary GET request. Consequently, anyone can spend the funds of any configured account by making a single HTTP call. |
|---|
| 来源 | ⚠️ https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-UnauthorizedTransfer-1/report.md |
|---|
| 用户 | sh7err03 (UID 92418) |
|---|
| 提交 | 2025-11-10 11時53分 (11 月前) |
|---|
| 管理 | 2025-11-30 15時13分 (20 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 333816 [nutzam NutzBoot 直到 2.6.0-SNAPSHOT Transaction API EthModule.java from/to/wei 权限提升] |
|---|
| 积分 | 20 |
|---|