vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-08-19 13:23:23 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
ntopng/scripts/lua/rest/v2/edit/system
History
Exact
Alfredo Cardigliano 669589fe20 Fix missing authorization check in edit_blacklist.lua REST endpoint 
Any authenticated user, including unprivileged accounts, could modify
threat intelligence blacklist URLs, enable/disable status, and update
intervals via POST /lua/rest/v2/edit/system/edit_blacklist.lua. Add
the same isAdministrator() guard used by the sibling
edit/category/category.lua endpoint.

GHSA-ffg5-889g-f5q8

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-16 14:53:27 +02:00
..
edit_blacklist.lua Fix missing authorization check in edit_blacklist.lua REST endpoint 2026-07-16 14:53:27 +02:00