CVE-2022-34112: Incorrect Permission Assignment for Critical Resource

An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator...

Glossword 1.8.11 - Arbitrary Uninstall Install

Glossword 1.8.11 - Arbitrary Uninstall Install ----------------------------- Evil-Cod3r ------------------------------- ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \...

Glossword 1.8.11 - Arbitrary Uninstall / Install

----------------------------- Evil-Cod3r ------------------------------- ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || &n bsp;...