Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Bug] hippo4j monitors unauthorized access vulnerabilities #1062

Open
laoquanshi opened this issue Feb 20, 2023 · 2 comments
Open

[Bug] hippo4j monitors unauthorized access vulnerabilities #1062

laoquanshi opened this issue Feb 20, 2023 · 2 comments
Labels
type: bug Something isn't working type: security

Comments

@laoquanshi
Copy link

The ItemController of the tenant management module module of hippo4j. There is an unauthorized access vulnerability in the new project information
The saveItem method does not authenticate the user performing the current operation, resulting in any user accessing the POST /hippo4j/v1/cs/item/save interface to add malicious new items.
Influence version
hippo4j 1.4.3 (Nov 06, 2022)
image
@magestacks
Copy link
Member

I will follow up on this question.

@laoquanshi
Copy link
Author

好的

@yanrongzhen yanrongzhen added type: bug Something isn't working type: security labels Sep 1, 2023
@yanrongzhen yanrongzhen changed the title hippo4j monitors unauthorized access vulnerabilities [Bug] hippo4j monitors unauthorized access vulnerabilities Sep 1, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
type: bug Something isn't working type: security
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@magestacks @yanrongzhen @laoquanshi