auth

PlaceOS Authentication ENV VARS If a sentry Data Source Name is configured SENTRYDSN=https://@.ingest.sentry.io/ A shared secret for encrypting cookies SECRETKEYBASE=84b04ea4259542f365 JWT Private key JWTSECRET=Base64 Encoded RSA PRIVATE KEY Database name and host RETHINKDBDB=placedevelopment...

PlaceOS 1.2109.1 - Open Redirection

PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessionscontroller.rb open redirect. id: CVE-2021-41826 info: name: PlaceOS 1.2109.1 - Open Redirection author: geeknik severity: medium description: PlaceOS Authentication Service before 1.29.10.0 allows...

PlaceOS 1.2109.1 - Open Redirection Detection

PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessionscontroller.rb open redirect. !/usr/bin/env python3 -- coding: utf-8 -- """PlaceOS Authentication Service before 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

PlaceOs Authentication Service Input Validation Error Vulnerability

PlaceOs Authentication Service is a PlaceOs authentication service and Api gatekeeper. PlaceOs Authentication Service is vulnerable to an input validation error, which can be exploited by attackers to open redirects...

CVE-2021-41826

PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessionscontroller.rb open redirect...

CVE-2021-41826

PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessionscontroller.rb open redirect...

Open redirect

PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessionscontroller.rb open redirect...

CVE-2021-41826

PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessionscontroller.rb open redirect...

PlaceOS 1.2109.1 Open Redirection

Exploit Title: PlaceOS 1.2109.1 - Open Redirection Date: 29-09-2021 Exploit Author: Hamza Khedr @ Accenture Austalia AARO Team Vendor Homepage: https://place.technology/ Software Link: https://github.com/PlaceOS Version: 1.29.10 Tested on: Ubuntu 20.04 CVE: CVE-2021-41826 PoC:...

PlaceOS 1.2109.1 - Open Redirection

Exploit Title: PlaceOS 1.2109.1 - Open Redirection Date: 29-09-2021 Exploit Author: Hamza Khedr @ Accenture Austalia AARO Team Vendor Homepage: https://place.technology/ Software Link: https://github.com/PlaceOS Version: 1.29.10 Tested on: Ubuntu 20.04 CVE: CVE-2021-41826 PoC:...

CVE-2021-41826

The PlaceOS Authentication Service is vulnerable to an open redirect flaw in versions prior to 1.29.10.0 . The issue is caused by an input validation error within the app/controllers/auth/sessions_controller.rb component. An attacker can exploit this to redirect users to malicious websites, poten...

CVE-2021-41826

PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessionscontroller.rb open redirect...

CVE-2021-41826

PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessionscontroller.rb open redirect...

CVE-2021-41826: URL Redirection to Untrusted Site

PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessionscontroller.rb open redirect...

PlaceOs Authentication Service has a vulnerability related to input validation errors.

PlaceOs Authentication Service is a PlaceOs authentication service and Api gatekeeper. PlaceOs Authentication Service is vulnerable to an input validation error, which can be exploited by attackers to open redirects...

PT-2021-23421

Name of the Vulnerable Software and Affected Versions PlaceOS Authentication Service versions prior to 1.29.10.0 Description The issue allows for an open redirect in the app/controllers/auth/sessions controller.rb file. Recommendations For versions prior to 1.29.10.0, update to version 1.29.10.0 ...