Agentejo Cockpit /auth/newpassword < 0.12.0 NoSQL注入(CVE-2020-35848)

2022-10-20 Cockpit PoC No

0.12.0之前的Agentejo Cockpit通过Auth控制器的newpassword方法容易受到NoSQL注入的攻击，该方法负责显示用户密码重置表单

None yet. Search at https://trap.biu.life/?ref=rss