CVE-2013-7379

creationtimestamp| type| source ---|---|--- 2020-08-31 22:59:07+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-9vxc-g2jx-qj3p...

CVE-2013-7379

CVE-2013-7379 describes an authentication bypass in the Node.js tomato module before 0.0.6. The admin API validates the access_key by checking if the server key contains the provided value (config.master.api.access_key.indexOf(access_key) !== -1), enabling an attacker to authenticate with a singl...