Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
quequnlong shiyi-blog photos improper authorization
Vulnerability Description
A vulnerability, which was classified as critical, has been found in quequnlong shiyi-blog up to 1.2.1. This issue affects some unknown processing of the file /dev api/app/album/photos/. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
授权机制不恰当
Vulnerability Title
shiyi-blog 安全漏洞
Vulnerability Description
shiyi-blog是bule个人开发者的一款vue+springboot前后端分离的博客系统。 shiyi-blog 1.2.1及之前版本存在安全漏洞，该漏洞源于存在授权不当问题。
CVSS Information
N/A
Vulnerability Type
N/A