Three-Pac

Results 1 issues of Three-Pac

jwt密钥泄露导致越权

默认开启了django的debug功能导致jwt密钥泄露 ![1](https://github.com/fofapro/vulfocus/assets/114380989/726d37a6-c8c1-4227-afa5-42f77f51cb34) ![2](https://github.com/fofapro/vulfocus/assets/114380989/c122c258-4f5a-4742-8445-f08e5ada7896) 替换cookie就拿到了管理员权限 ![image](https://github.com/fofapro/vulfocus/assets/114380989/8fda64da-9775-44bb-95b2-dafb433a836d) 处置措施：关闭django debug功能

bug