dts-shop Incorrect Access Control Vulnerability Allowing Authentication Bypass

A vulnerability allowing authentication bypass has been identified in dts-shop version 0.0.1-SNAPSHOT. This issue arises from incorrect access control, specifically in APIs that require authentication. The vulnerability can be exploited by sending a crafted payload to the '/admin/auth/index' API, which bypasses authentication and grants unauthorized access.

Impact

Exploitation of this vulnerability allows for authentication bypass, enabling attackers to access protected APIs without proper authorization.

Reproduction

To reproduce this vulnerability, send a request to the '/admin/auth/index' API with a payload that includes a path traversal sequence. This will bypass the authentication checks and grant access to the API.