FOG Project FOG 权限管理不当漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/FOGProject/fogproject/security/advisories/GHSA-p3f9-4jj4-fm2g
• https://cve.imfht.com/poc_detail/930f3583a87015714f9a6c97a1addaca9ca08f28
• https://www.sentinelone.com/vulnerability-database/cve-2025-58443/
• https://avd.aliyun.com/detail?id=AVD-2025-58443
• https://medium.com/@thaerbayyari089/fog-project-auth-bypass-poc-503af9c2b5ed
• https://github.com/FOGProject/fogproject/security/advisories/GHSA-pcqm-h8cx-282c

Related Vulnerabilities

• PoCclaude-settings-exposure: Claude Code Project Settings Exposure
• 关于用友GRP-U8Cloud产品getBudgetReleaseProjectList及U8AppProxy及fbpm-modeler存在命令执行漏洞的安全通告
• FOGProject /fog/management/export.php 信息泄露漏洞（CVE-2025-58443）
• PoCCVE-2026-47717: FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure
• TRUfusion Enterprise /trufusionPortal/getProjectList 权限绕过漏洞（CVE-2025-27223）
• FUXA /api/project 信息泄露漏洞（CVE-2026-47717）
• 孚盟云 CRM /PageStructure/Normal/TfrmProject.aspx 文件读取漏洞
• PoCopenproject-default-login: OpenProject - Default Admin Credentials
• FUXA /api/project 权限绕过漏洞（CVE-2025-69971）
• OpenProject存在默认口令
• PoCCVE-2024-13114: WP Projects Portfolio <= 3.0 - Cross-Site Scripting
• PoCFOG Project /fog/service/getversion.php 文件读取漏洞（CVE-2026-24138）