CVE-2024-57154

The dts-shop software, specifically version v0.0.1-SNAPSHOT , is susceptible to an incorrect access control vulnerability. An attacker can bypass authentication by sending a crafted payload to the /admin/auth/index API endpoint. This flaw allows unauthorized access to administrative functions. As...