漏洞描述
OpenSearch Dashboard存在未授权访问，攻击者可以直接访问仪表盘。
OpenSearch Dashboard存在未授权访问
PoC代码
暂无相关漏洞推荐
- POC unauth-munin: Munin Monitoring Dashboard - Exposure
- POC unauth-akhq-dashboard: AKHQ Dashboard - Unauthenticated Access
- POC unauth-hawkeye-dashboard: Unauth Hawkeye Dashboard - Detect
- POC unauth-phoenix-dashboard: Unauth Phoenix Dashboard - Detect
- POC unauth-supervisor-dashboard: Unauth Supervisor Dashboard - Detect
- MCPHub Dashboard JWT硬编码身份认证绕过漏洞
- OpenSearch Dashboard为存在默认口令
- POC CVE-2018-18264: Kubernetes Dashboard <1.10.1 - Authentication Bypass
- POC CVE-2021-22053: Spring Cloud Netflix Hystrix Dashboard <2.2.10 - Remote Code Execution
- POC CVE-2021-3223: Node RED Dashboard <2.26.2 - Local File Inclusion
- POC CVE-2021-45232: Apache APISIX Dashboard <2.10.1 - API Unauthorized Access
- POC CVE-2022-38817: Dapr Dashboard 0.1.0-0.10.0 - Improper Access Control
- POC CVE-2023-7246: System Dashboard < 2.8.10 - Cross-Site Scripting