V2Board Sensitive Token Exposure Vulnerability in UniProxyController

A vulnerability exists in V2Board versions through 1.7.4, where the server authentication token is exposed via a GET parameter in the UniProxyController. This token is included in URLs, such as '/api/v1/server/UniProxy/user?token=SECRET', and can be logged by web servers, browsers, proxies, and CDNs. An attacker with access to these logs can extract the token and impersonate a proxy server node, potentially intercepting user traffic.

Impact

Exploitation of this vulnerability allows for unauthorized impersonation of a proxy server node, with the potential to intercept all user traffic.

Remediation

The vulnerability can be remediated by moving token transmission to a request header or POST body, as query parameters are not suitable for sending credentials.