PT-2018-14809

Name of the Vulnerable Software and Affected Versions tianti version 2.3 Description The issue allows remote authenticated users to bypass intended permission restrictions. This is possible by visiting the "tianti-module-admin/user/skin/list" endpoint directly. The UserController.java maps a...