LuckyFrameWeb Information

[bayuncao]

Ordinary users can access non-privileged interfaces. lead to information leakage,

Interface with information leakage ：
/testmanagmt/projectCase/list
/testmanagmt/projectCase/edit
/testmanagmt/projectCase/copy
/testmanagmt/projectCaseSteps/edit
/testmanagmt/projectCaseDebug/projectCaseDebug/
/testmanagmt/projectCase/export
/testmanagmt/projectCaseModule/list
/testmanagmt/projectProtocolTemplate
/testmanagmt/projectPlan/list
/testmanagmt/projectCaseParams/list
/testexecution/taskScheduling/list
/testexecution/taskExecute/list
/testexecution/taskCaseExecute/list
/qualitymanagmt/qaVersion/list
/qualitymanagmt/qaAccident/list