Описание
feiqu-opensource Background Vertical authorization vulnerability exists in IndexController.java. demo users with low permission can perform operations within the permission of the admin super administrator and can use this vulnerability to change the blacklist IP address in the system at will.
Ссылки
- ExploitIssue TrackingThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:feiqu-opensource_project:feiqu-opensource:-:*:*:*:*:*:*:*
EPSS
Процентиль: 26%
0.00089
Низкий
8.8 High
CVSS3
Дефекты
NVD-CWE-Other
CWE-284
Связанные уязвимости
CVSS3: 8.8
github
почти 3 года назад
feiqu-opensource Background Vertical authorization vulnerability exists in IndexController.java. demo users with low permission can perform operations within the permission of the admin super administrator and can use this vulnerability to change the blacklist IP address in the system at will.
EPSS
Процентиль: 26%
0.00089
Низкий
8.8 High
CVSS3
Дефекты
NVD-CWE-Other
CWE-284