Anhui Xufan Information Technology EasyCVR Information Disclosure Vulnerability

A vulnerability allowing information disclosure has been identified in Anhui Xufan Information Technology EasyCVR versions through 2.7.0. The issue arises in the file '/api/v1/getbaseconfig', where an unknown code can be manipulated to leak information. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability leads to unauthorized information disclosure.

Reproduction

The vulnerability can be reproduced by sending a request to the '/api/v1/getbaseconfig' endpoint. The response will contain sensitive information that should not be disclosed.