Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[BUG] hertzbeat has a problem bypassing permissions #377

Closed
1 task done
2xiaodi opened this issue Oct 21, 2022 · 2 comments · Fixed by #382
Closed
1 task done

[BUG] hertzbeat has a problem bypassing permissions #377

2xiaodi opened this issue Oct 21, 2022 · 2 comments · Fixed by #382
Labels
bug Something isn't working

Comments

@2xiaodi
Copy link

2xiaodi commented Oct 21, 2022

Is there an existing issue for this?

  • I have searched the existing issues

Current Behavior

开发者您好，我很热爱这个开源项目，在使用中发现一点问题，关于hertzbeat系统的权限控制存在一定的安全隐患

Expected Behavior

No response

Steps To Reproduce

Normally, there is no Authorization request

image

The circumvention caused by a particular means

image

Environment

HertzBeat version(s):1.2.0

Debug logs

No response

Anything else?

No response
@2xiaodi 2xiaodi added the bug Something isn't working label Oct 21, 2022
@tomsun28 tomsun28 moved this to Todo in hertzbeat Oct 21, 2022
@tomsun28 tomsun28 mentioned this issue Oct 23, 2022
Merged
@tomsun28 tomsun28 linked a pull request Oct 23, 2022 that will close this issue
[manager] upgrade sureness v1.0.8 to fix bypassing api auth bug #382
Merged
@tomsun28
Copy link
Contributor

👍👍 thanks for feedback. this will be fixed by #382

@tomsun28
Copy link
Contributor

fixed at version v1.2.1

Repository owner moved this from Todo to Done in hertzbeat Oct 30, 2022
@tomsun28 tomsun28 moved this to Done in hertzbeat-v1.0 Sep 14, 2023
@tomsun28 tomsun28 removed this from hertzbeat Sep 14, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

[manager] upgrade sureness v1.0.8 to fix bypassing api auth bug apache/hertzbeat
2 participants
@tomsun28 @2xiaodi