JobX Authentication Bypass Vulnerability Allowing Access to Sensitive API

An authentication bypass vulnerability has been identified in JobX versions through 1.0.1-RELEASE. This vulnerability allows attackers to access sensitive APIs without a token by exploiting the preHandle function in the SecurityHandlerInterceptor class. The issue arises from improper access control, where the request path can be manipulated to bypass authentication checks.

Impact

Exploitation of this vulnerability allows unauthorized access to sensitive API endpoints, potentially leading to exposure of confidential user information.

Reproduction

To reproduce this vulnerability, first ensure that the contextPath configuration is set to a non-empty value, such as '/demo'. Then, access the API endpoint '/demo/user/get.do' directly, which will result in a redirect. Instead, use the '/login/../demo/user/get.do' path to bypass the authentication check and gain access to user information.