Discuss Kit 用户接口存在数据泄露风险
这个接口不需要鉴权，而且返回了别人邮箱数据，会被别人遍历一波，窃取对应的邮箱数据，钓鱼
https://community.arcblock.io/api/profile/user/z1WnD78zE8z24B27SiDqBo2PryG1oaQttPw
{"did":"z1WnD78zE8z24B27SiDqBo2PryG1oaQttPw","fullName":"ystat","avatar":"/.well-known/service/user/avatar/902557f0f3adc74fedf876c280058b41.png","passports":["VerifiedEmailCredential"],"validPassportNames":["651792960@qq.com","651792960@qq.com"],"locale":"zh","pointInfo":{"maxPoints":370,"unUsedPoints":370,"grade":{"name":"Veteran","icon":"/image-bin/uploads/47ccaa325450f7d4756374d0ab947983.png","id":"386854420077346816","isDisabled":0}}}
1 条回复
已修复