Insecure Session Management

pterodactyl/panel is vulnerable to insecure session management. The vulnerability exists in handle function in the AuthenticateKey.phpfile, allowing malicious attackers to compromises the API key generation and log in to the system...

PT-2022-28215

Name of the Vulnerable Software and Affected Versions Pterodactyl Panel versions auth-guard-loginUsingId$model-user id; to $this-auth-guard-onceUsingId$model-user id;...