Description
UEditor是由百度web前端研发部开发的一款web编辑器。百度UEditor存在未授权访问漏洞。攻击者可利用漏洞无需账号密码登录系统，执行未授权操作。
UEditor 编辑器 /ueditor/index.html 未授权访问漏洞（CNVD-2019-07933）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnvd.org.cn/flaw/show/CNVD-2019-07933
https://blog.csdn.net/bluemoon_0/article/details/129483324
https://cloud.tencent.com/developer/article/2200011
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/others/Ueditor-%E7%BC%96%E8%BE%91%E5%99%A8%E6%BC%8F%E6%B4%9E%E6%80%BB%E7%BB%93.md
https://bbs.huaweicloud.com/blogs/406031
https://www.cnblogs.com/zhibing/p/16893839.html