Description
AJ-Report开源BI平台存在鉴权绕过漏洞，此漏洞是由于 validation 接口未充分验证用户的身份所导致的。
AJ-Report开源BI平台 swagger-ui 鉴权绕过漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/AJ-Report-%E8%AE%A4%E8%AF%81%E7%BB%95%E8%BF%87%E4%B8%8E%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CNVD-2024-15077.md
https://www.cnblogs.com/Rainy-Day/p/18220776
https://cloud.tencent.com/developer/article/2419692
https://avd.aliyun.com/detail?id=AVD-2024-7314
https://www.cnvd.org.cn/flaw/show/CNVD-2024-15077
https://www.vulncheck.com/advisories/aj-report-swagger