Threats tagged 'ghsa-vr22-hjrf-w5jq'

paicoding versions from commit b8206b9 through commit 903adce have a vulnerability where accounts created via ZSXQ login use predictable credentials. The username and password are derived solely from the member's ZSXQ number, which is publicly accessible via the victim's profile page. This allows unauthenticated attackers to compute the credentials and log in to the victim's account without authorization.