漏洞标题
Rapid Response Monitoring My Security Account App授权绕过漏洞
漏洞描述信息
Rapid Response Monitoring My Security Account App 使用的API可能被攻击者利用来修改请求数据,可能导致API返回其他用户的信息。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
漏洞类别
通过用户控制密钥绕过授权机制
漏洞标题
Rapid Response Monitoring My Security Account App Authorization Bypass Through User-Controlled Key
漏洞描述信息
Rapid Response Monitoring My Security Account App utilizes an API that could be exploited by an attacker to modify request data, potentially causing the API to return information about other users.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
漏洞类别
通过用户控制密钥绕过授权机制