A logic vulnerability in jiuxian.com allows other user accounts to leak user information.

A logic vulnerability in jiuxian.com allows other user accounts to leak user information.

A logic vulnerability in jiuxian.com allows other user accounts to leak user information.

Log on to jiuxian.com, click "Log on" in the upper left corner, select a Weibo account to log on to the partner account, click "cancel" on the logon page, and then automatically jump to the jiuxian.com homepage, even if the page is automatically logged on to any user account, the account balance is large...

Leakage Process
 

 

 

 

 

 

Leakage Process
 

 

 

 

 

 

 

Solution:

Weibo cooperative login adjustment mechanism.