一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-58477 [HIGH] – Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vu

未分类
📑 文章目录

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauthenticated attackers to overwrite sensitive configuration settings by supplying arbitrary parameter names in HTTP requests. Attackers can manipulate parameters corresponding to sensitive values such as the passphrase and listening port, and can also achieve the same result through cross-site request forgery due to the absence of adequate request validation.