漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
LibreTime 3.0.0-alpha.10 and possibly earlier is vulnerable to Broken Access Control, where a user with the DJ role can access analytics data via the Web UI and direct API calls. The backend does not verify role-based permissions for analytics endpoints, allowing unauthorized retrieval of station-wide metrics. This results in information disclosure to less privileged users.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Libretime 安全漏洞
Vulnerability Description
Libretime是一个无线电广播和自动化平台。 Libretime 3.0.0-alpha.10及之前版本存在安全漏洞，该漏洞源于未验证基于角色的权限，可能导致信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A