search

ycshope / online-shopping-mal

online shopping mal base on django,deploy by docker-compose
0 stars 0 forks source link

BUG:地址功能没有校验session,导致水平越权【SEC】 #23

Open ycshope opened 2 years ago

ycshope commented 2 years ago

水平越权:没有通过sessionid校验用户的身份导致任意查询,编辑和删除