Post #232 — PagerMaid-Modify Update (@PagerMaid

TGStat

Type to search

Advanced channel search

English

Site language

Russian English Uzbek
Sign In

Catalog

Channels and groups catalog Search for channels
Add a channel/group
Ratings

Rating of channels Rating of groups Posts rating
Ratings of brands and people
Analytics
Search by posts
Telegram monitoring

PagerMaid-Modify Update

22 Sep, 17:37

Open in Telegram Share Report

#CVE

PagerMaid-Pyro 网页控制面板密码泄漏安全警告

漏洞等级

严重

影响范围

>= 1.2.30, < 1.4.14, 开启网页控制面板的用户

修复方案

执行 ,update 升级到最新版，如果您不想升级请关闭网页控制面板或者禁止外网访问。

详情

https://github.com/TeamPGM/PagerMaid-Pyro/security/advisories/GHSA-w8pq-5mrm-qfgq

频道 @PagerMaid_Modify

PagerMaid-Pyro web token leaks

### Summary When using the web control panel, the home page will hardcode the token string, and this behavior leads to leakage of the token. ### PoC Since the Log component of the amis tem...