Skip to content

[Bug] Unauthorized access #3205

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
zhainanshidai opened this issue Jun 6, 2025 · 2 comments
Open

[Bug] Unauthorized access #3205

zhainanshidai opened this issue Jun 6, 2025 · 2 comments
Assignees
@zyyfit
Labels
Type: Bug
Milestone
v1.10.9

Comments

@zhainanshidai
Copy link

Contact Information

No response

MaxKB Version

1.10.9

Problem Description

未授权访问
/api/

/api/display/info
未对接口做权限校验，导致可以未授权访问

Steps to Reproduce

未授权访问
/api/

/api/display/info
未对接口做权限校验，导致可以未授权访问

The expected correct result

No response

Related log output



Additional Information


No response

      		
    

      
  





        



            
            

              
            

        

      


      
    








      

    



      

  
            


    

    

      
    

    


      

          @zhainanshidai
zhainanshidai




        changed the title
[Bug] 未授权访问

[Bug] 接口存在未授权访问


      Jun 6, 2025

    

  



    

    

      
    

    


      

          @shaohuzhang1
shaohuzhang1




        changed the title
[Bug] 接口存在未授权访问

[Bug] Unauthorized access


      Jun 6, 2025

    

  








      

  
      



  

  @zyyfit





  


    

      

  

    

        
    
    

  


      
          
  
      
            Copy link

  

      
    

  


  

      



      

  


  

    

      

      
            zyyfit
  

      

      

      commented


        Jun 9, 2025


      
    


  





      


        


  
    

      
          
感谢反馈，后续版本修复

      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
      



  

  @shaohuzhang1





  


    

      

  

    

        
    
    

  


      
          
  
      
            Copy link

  

      
    

  


  

      

  
    Contributor


      

  


  

    

  





      


        


  
    

      
          


Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿






Thanks for the feedback, subsequent version fixes

      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
            


    

    

      
    

    


      

          @zyyfit
zyyfit




          added this to the   v1.10.9 milestone


      Jun 9, 2025

    

  












  
  

    

      

  





  




  
  

              

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  



  






  
                  




    

  


      
  

    Assignees
  



        

      

        

  
      @zyyfit
  
    zyyfit
    

      








      


  


  

    Labels
  



    

      

    Type: Bug









      

  

    

        

    Projects
  


        




    None yet




  



      


  

    
  

    Milestone
  


      
    
  
    v1.10.9
  





    
      
          


  

    

      
        

          
    

    Development
  




            
    
No branches or pull requests







      
    

  




      

    

  
      

  

    

      3 participants
    

    

        
          @zyyfit 
        
          @shaohuzhang1 
        
          @zhainanshidai