didi / KnowSearch

面向Elasticsearch研发与运维人员,围绕集群、索引构建的零侵入、多租户的Elasticsearch GUI管控平台
https://github.com/didi/KnowSearch
418 stars 106 forks source link

KnowSearch 用户登录权限安全风险修复 #94

Closed PenceXie closed 9 months ago

PenceXie commented 9 months ago

定位arius-admin模块进行登陆拦截和权限校验的PermissionInterceptor接口的preHandle方法 滴滴出行漏洞修补报告0218.docx

PenceXie commented 9 months ago

已修复