Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OneUptime Unauthorized User Creation via API
Vulnerability Description
OneUptime is a solution for monitoring and managing online services. In version 9.0.5598, a low-permission user can create new accounts through a direct API request instead of being restricted to the intended interface. This issue has been patched in version 9.1.0.
CVSS Information
N/A
Vulnerability Type
授权机制不恰当
Vulnerability Title
OneUptime 授权问题漏洞
Vulnerability Description
OneUptime是OneUptime开源的一个全面的解决方案。用于监控和管理您的在线服务。 OneUptime 9.0.5598版本存在授权问题漏洞，该漏洞源于低权限用户可以通过直接API请求创建新账户，可能导致绕过预期的接口限制。
CVSS Information
N/A
Vulnerability Type
N/A