spring 5.3.19 CVE-2022-22968: Spring Framework Data Binding Rules Vulnerability
This commit is contained in:
@@ -180,7 +180,7 @@ public class LoginEntryPoint {
|
||||
public String produceOtp(@PathVariable("mobile") String mobile,HttpServletRequest request) {
|
||||
UserInfo queryUserInfo=userInfoService.findByEmailMobile(mobile);
|
||||
if(queryUserInfo!=null) {
|
||||
otpAuthnService.getByInstId(WebContext.getInst(request)).produce(queryUserInfo);
|
||||
//otpAuthnService.getByInstId(WebContext.getInst(request)).produce(queryUserInfo);
|
||||
return "ok";
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user