漏洞关键信息 漏洞名称 Unauthenticated IDOR Allows Access to Arbitrary User Files 严重程度 High (7.5/10) 影响版本 Affected versions: <= 4.1 Patched versions: 4.2 漏洞描述 Summary: Insecure Direct Object Reference (IDOR) vulnerability allows unauthenticated remote attackers to access personal files of other users by directly requesting predictable user identifiers. Details: The application exposes a file access endpoint that does not enforce authentication or authorization controls. By directly referencing another user's identifier (ID) and a file name in the URL, an attacker can access personal files belonging to other users without being authenticated. 影响的端点 证明概念 (PoC) Steps to reproduce: 1. Identify a valid user identifier and a file name (e.g., 14 and personal_file.txt). 2. Send the following HTTP request without authentication or visit the URL in browser: 3. The server responds with the contents of the requested file. 漏洞发现者 This vulnerability was discovered and reported by Alexandros Perrakis (Stolichnayer) 其他信息 CVE ID: CVE-2026-24773 Weaknesses: CWE-639