Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
API allows deletion of users of other instance
Vulnerability Description
A user with API access and "manage users" permission in any venueless world is able to trigger deletion of user accounts in other worlds.
CVSS Information
N/A
Vulnerability Type
不充分的划分
Vulnerability Title
venueless 安全漏洞
Vulnerability Description
venueless是venueless开源的一个在线活动平台。 venueless存在安全漏洞，该漏洞源于权限管理不当，可能导致具有API访问权限和“管理用户”权限的用户删除其他世界的用户账户。
CVSS Information
N/A
Vulnerability Type
N/A