Tags: #漏洞报告

The login function fails to invalidate the captcha after one use. This allows an attacker to replay a valid captcha to bypass brute-force protection.

A critical SQL injection vulnerability in the user list endpoint allows authenticated attackers to exfiltrate sensitive user data, including password hashes.

A missing authorization check in the file deletion function allows any authenticated user to delete any file on the system by its ID.