T05 · Unauthorized Access and Privilege Escalation
Error
- Location
scripts/settings.py:44- Finding
Unauthenticated Configuration Server Exposes and Modifies Local Calendar Data
- Content
View full analysis
dict: length = int(self.headers.get("Content-Length", 0)) if length == 0: return {} raw = self.rfile.read(length) return json.loads(raw.decode("utf-8")) def do_GET(self): if self.path == "/" or self.path == "/index.html": self._send_html(self._generate_page()) elif self.path == "/config": cfg = load_config() self._send_json(cfg) elif self.path == "/export-rules-template": year = datetime.now().year template = export_rules_template(year) self._send_json(template) elif self.path == "/export-board": year = datetime.now().year html = generate_weekly_board_html(year, embed_schedule=False) self._send_html(html) elif self.path == "/export-schedule-weekly": year = datetime.now().year html = generate_weekly_board_html(year, embed_schedule=True) self._send_html(html) elif self.p ...[truncated 3789 chars]- Remediation
View remediation