References https://docs.datahub.com/docs/authentication/changing-default-credentials https://github.com/datahub-project/datahub/security/advisories/GHSA-mcrw-j7x9-x556 https://github.com/datahub-project/datahub/issues/1620 https://github.blog/security/vulnerability-research/github-security-lab-audited-datahub-heres-what-they-found/ https://docs.datahub.com/docs/authentication https://github.com/datahub-project/datahub/blob/master/datahub-frontend/conf/user.props https://securitylab.github.com/advisories/GHSL-2022-076_GHSL-2022-083_DataHub/ http://www.yxfzedu.com/article/3985
Related VulnerabilitiesFlowise /api/v1/loginmethod 未授权访问漏洞(CVE-2026-56270)PoC泛微E-cology10 /papi/passport/appnew/login/appLogin 未授权访问漏洞ZKTeco BioTime 平台 /accounts/login 默认口令漏洞PoCNginxWebUI /adminPage/login/getAuth 命令执行漏洞天锐绿盾审批系统 /trwfe/login.jsp/..;/thirdSystemConfig/findSingConfigPage.do SQL 注入漏洞Datart /api/v1/users/login 默认口令漏洞Goploy /user/login 默认口令漏洞Citrix-NetScaler /saml/login 信息泄露漏洞(CVE-2026-8451)UniFi Network Application /guest/s/default/login 目录遍历漏洞(CVE-2026-22557)管家婆物联通 /Login/getLogin 默认口令漏洞创世13星零售商城系统 /Login/shangchuan 文件上传漏洞Apache Ranger /login 默认口令漏洞锐捷校园网自助服务系统 /selfservice/selfservice/module/scgroup/web/login_judgedge.jsf 文件读取漏洞