CVE-2024-57433
macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function. After a user logs out, their token is still available an...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function. After a user logs out, their token is still available and fetches information in the logged-in state.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web github.com