Threats affecting pkg:github/pig

pig versions up to and including 4.1.1 have a missing authorization vulnerability in the SysUserController.user endpoint. This flaw allows any authenticated user to access other users' profile details via a GET request to /admin/user/details/{id}. Attackers with low privileges can enumerate user IDs sequentially to obtain sensitive information such as usernames, real names, phone numbers, emails, linked third-party accounts, and role assignments.

pig before 4.1.0 contains an authentication bypass vulnerability in the /register/password endpoint where password verification results are discarded, allowing any value as the current password. Remote attackers can submit a username with an incorrect current password to overwrite any account credential including the admin account and gain full administrative control.