ID:9005 - Exploit for Permissions, Privileges, and Access Controls in ShardingSphere ElasticJob-UI - CVE-2022-22733

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to a password disclosure flaw in the Access-Token. A remote authenticated attacker can send a specially crafted request and gain elevated privileges on the target system.

Remediation