Description
群杰印章物联网存在密码重置漏洞，该漏洞是由于updateRestUser接口对用户发送的请求验证不当导致的。
群杰印章物联网 updateRestUser 密码重置漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E7%BE%A4%E6%9D%B0%E5%8D%B0%E7%AB%A0%E7%89%A9%E8%81%94%E7%BD%91%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0/%E7%BE%A4%E6%9D%B0%E5%8D%B0%E7%AB%A0%E7%89%A9%E8%81%94%E7%BD%91%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0rest%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E6%BC%8F%E6%B4%9E(XVE-2024-18945).md
https://wiki.shikangsi.com/profile/2/?page=13
http://16hangbo.com/jsrz/956.html
https://www.scribd.com/document/886998583/Hw2024-08-06-%E5%BE%AE%E6%AD%A5%E9%AA%8C%E7%9C%9F%E6%BC%8F%E6%B4%9E%E6%83%85%E6%8A%A5%E5%90%88%E9%9B%86
https://wiki.xazlsec.com/project-49/