Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper.
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
Link | Tags |
---|---|
https://t.me/WangPanBOT?start=file96eb2dc53cc57847 | not applicable |
https://github.com/AgainstTheLight/CVE-2022-30929 | third party advisory exploit |