Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2021/11/03 5:30 p.m.•54 views

Missing Authorization with Default Settings in Dashboard UI

Dashboard UI in Hangfire.Core uses authorization filters to protect it from showing sensitive data to unauthorized users. By default when no custom authorization filters specified, LocalRequestsOnlyAuthorizationFilter filter is being used to allow only local requests and prohibit all the remote...

8.6CVSS1AI score0.00961EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder