关键漏洞信息 Vendor: semanify Product: mogpub Version: v0.3.10 Vulnerability: Unauthorized access Description: Users can directly forge any user's identity without logging in to access and operate the API. Analysis The dynamic route has a vulnerability in authorization validation. The file contains the following code snippet: The implementation of the function: The function validates the JWT on the server-side. When performing error handling, the middleware creates a new object on the logged-in user for HTTP session. POC (Proof of Concept)