CVE-2024-50477

This exploit demonstrates an authentication bypass vulnerability in Stacks Mobile App Builder by manipulating query parameters to impersonate a user (typically the administrator). The attack involves appending specific parameters to the URL to gain unauthorized access to the admin dashboard.

This PoC demonstrates an authentication bypass vulnerability in Stacks Mobile App Builder <= 5.2.3. By manipulating the `uid` parameter in a crafted URL, an unauthenticated attacker can log in as any user, including administrators.