Skip to content

jwt密钥泄露导致越权 #354

Open
@Three-Pac

Description

默认开启了django的debug功能导致jwt密钥泄露
1

2
替换cookie就拿到了管理员权限
image

处置措施:关闭django debug功能

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions