New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

base64Captcha v1.3.6的bug导致simple-admin所有可选验证码的场景验证码可绕过 #270

Closed

aac3476 opened this issue Mar 4, 2024 · 5 comments

aac3476 commented Mar 4, 2024 •

edited

例如：https://github.com/suyuan32/simple-admin-member-api/blob/6cceafa1077fc3f921fb24f7ce596e3bb894f573/internal/logic/publicmember/login_logic.go#L48

开关失效可以通过传空验证码信息绕过验证码验证

相关问题链接
mojocn/base64Captcha#122

建议降级base64Captcha版本

Owner

suyuan32 commented Mar 4, 2024

api不是有校验不能为空嘛

Owner

suyuan32 commented Mar 4, 2024

Owner

suyuan32 commented Mar 4, 2024

好吧omitempty 了

Owner

suyuan32 commented Mar 4, 2024

已修复 https://github.com/suyuan32/base64Captcha/releases/tag/v1.3.7

suyuan32 closed this as completed

Author

aac3476 commented Mar 5, 2024

已修复 https://github.com/suyuan32/base64Captcha/releases/tag/v1.3.7

效率

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment