GuoMinJim PersonManage Path Traversal Vulnerability in Login PreHandle Function

A critical path traversal vulnerability has been identified in GuoMinJim PersonManage version 1.0. The issue arises in the login function's preHandle method, where manipulation of the Request argument can lead to unauthorized access by traversing directories. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for path traversal, which can lead to unauthorized access to files and directories on the server.

Reproduction

The vulnerability can be reproduced by sending a request to the login endpoint with a crafted Request argument that includes directory traversal sequences. This will bypass the normal login verification process and potentially allow access to restricted areas of the application.