Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In pig-mesh In Pig version 3.8.2 and below, within the Token Management function under the System Management module, the token query interface (/api/admin/sys-token/page) has an improper permission verification issue, which leads to information leakage. This interface can be called by any user who has completed login authentication, and it returns the plaintext authentication Tokens of all users currently logged in to the system. As a result, ordinary users can obtain the administrator's authentication Token through this interface, thereby forging an administrator account, gaining the system's management permissions, and taking over the system.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
pig 安全漏洞
Vulnerability Description
pig是pig-mesh开源的一个权限管理系统。 pig 3.8.2及之前版本存在安全漏洞，该漏洞源于系统管理模块中令牌管理功能的令牌查询接口/api/admin/sys-token/page存在权限验证不当问题，可能导致信息泄露和权限提升。
CVSS Information
N/A
Vulnerability Type
N/A