MineAdmin Information Disclosure Vulnerability in Swagger Component

A vulnerability allowing information disclosure has been identified in MineAdmin versions 1.x and 2.x. This issue arises in the Swagger component, where an unknown function leaks sensitive information. The vulnerability can be exploited remotely, and a public exploit is available.

Impact

Exploitation of this vulnerability leads to unauthorized information disclosure.

Reproduction

The vulnerability can be reproduced by sending a GET request to the '/swagger/http.json' endpoint. This request can be made without any authentication.

Remediation

It is recommended to strengthen permission validation at the Swagger interface.