agrologic-repo / agrologic-repo/webchick-server
if we have log in to our webchick, we can go to other farm's webchick simply by changing the user ID at the address, manually
未關閉
Bloker
bug
- 主要語言
- Java
- 星號
- 2
- 分支
- 0
- PR 合併指標
- 30 天內沒有已合併 PR
描述
if we have log in to our webchick, we can go to other farm's webchick simply by changing the user ID at the address, manually :
http://agrologic.farm-view.com:8084/webchick/my-farms.html?userId=XXX
So, he said if we change the XXX number, we can directly go to other farm's webchick.
I have tried and it is correct. What do you think? It is dangerous because somebody can change parameters?
貢獻指南
這個儲存庫沒有索引到貢獻指南
評估
這個 Issue 還沒有評估資料。