1 matches found
Improper Authentication
github.com/seaweedfs/seaweedfs is vulnerable to improper authentication. The vulnerability is due to the filer registering the SeaweedIdentityAccessManagement gRPC service without mandatory authentication when jwt.filersigning.key is unset, which allows an attacker who can reach the filer gRPC po...
9.8CVSS5.9AI score0.00408EPSS
SaveExploits0References4Affected Software1
20