2 matches found
PYSEC-2026-767 Access control issue in AlekSIS-Core
An access control issue in aleksis/core/util/authhelpers.py: ClientProtectedResourceMixin of AlekSIS-Core v2.8.1 and below allows attackers to access arbitrary scopes if no allowed scopes are specifically set...
6.5CVSS6.1AI score0.00702EPSS
SaveExploits0References8
CVE-2022-29773
An access control issue in aleksis/core/util/authhelpers.py: ClientProtectedResourceMixin of AlekSIS-Core v2.8.1 and below allows attackers to access arbitrary scopes if no allowed scopes are specifically set...
6.5CVSS5.9AI score0.00702EPSS
SaveExploits0References2
20