Lucene search
Lujiefsi4BCD404F-D30C-4EED-BA97-10504AC0CFDAHistoryApr 02, 2023 - 7:00 a.m.
IDOR make one user can stop, start , delete, edit others' source
2023-04-0207:00:31
lujiefsi
www.huntr.dev
6
idor; unauthorized actions; source management
EPSS
0.003
Percentile
70.8%
Proof of Concept
1 user1 create a source with id =1
2 user2 create a source with id =2
3 user1 delete the source with post DELETE /inlong/manager/api/source/delete/1?sourceType= HTTP/1.1
4 user1 repalce the 1 as 2, and find that he can sucess delete user2’ source.
Related
osv
osv
Apache InLong has Files or Directories Accessible to External Parties in Apache InLong
2023-07-06 21:14:59
CVE-2023-31066
2023-05-22 16:15:10
prion
prion
Xxe
2023-05-22 16:15:00
cve
cve
CVE-2023-31066
2023-05-22 16:15:10
cnvd
cnvd
Apache InLong Security Bypass Vulnerability (CNVD-2023-42961)
2023-05-28 00:00:00
nvd
nvd
CVE-2023-31066
2023-05-22 16:15:10
veracode
veracode
Insecure Direct Object References (IDOR)
2023-05-26 02:15:32
cvelist
cvelist
github
github