CyberRota Analysis
AI-GeneratedA vulnerability in the ExposeApiAspect.beforeExposeApi function of dromara orion-visor versions up to 2.5.7 allows for remote exploitation, potentially exposing hard-coded credentials. This high-severity issue poses a significant risk to systems utilizing this Java framework, especially those handling sensitive data. Organizations using affected versions should prioritize immediate remediation to mitigate the risk of credential exposure and potential unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in dromara orion-visor up to 2.5.7. Affected by this issue is the function ExposeApiAspect.beforeExposeApi of the file ExposeApiAspect.java. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.