15 matches found
PlaceOS 1.2109.1 - Open Redirection
PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessionscontroller.rb open redirect. id: CVE-2021-41826 info: name: PlaceOS 1.2109.1 - Open Redirection author: geeknik severity: medium description: PlaceOS Authentication Service before 1.29.10.0 allows...
auth
PlaceOS Authentication ENV VARS If a sentry Data Source Name is configured SENTRYDSN=https://@.ingest.sentry.io/ A shared secret for encrypting cookies SECRETKEYBASE=84b04ea4259542f365 JWT Private key JWTSECRET=Base64 Encoded RSA PRIVATE KEY Database name and host RETHINKDBDB=placedevelopment...
PlaceOs Authentication Service Input Validation Error Vulnerability
PlaceOs Authentication Service is a PlaceOs authentication service and Api gatekeeper. PlaceOs Authentication Service is vulnerable to an input validation error, which can be exploited by attackers to open redirects...
CVE-2021-41826
PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessionscontroller.rb open redirect...
CVE-2021-41826
PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessionscontroller.rb open redirect...
Open redirect
PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessionscontroller.rb open redirect...
CVE-2021-41826
PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessionscontroller.rb open redirect...
PlaceOS 1.2109.1 Open Redirection
Exploit Title: PlaceOS 1.2109.1 - Open Redirection Date: 29-09-2021 Exploit Author: Hamza Khedr @ Accenture Austalia AARO Team Vendor Homepage: https://place.technology/ Software Link: https://github.com/PlaceOS Version: 1.29.10 Tested on: Ubuntu 20.04 CVE: CVE-2021-41826 PoC:...
PlaceOS 1.2109.1 - Open Redirection
Exploit Title: PlaceOS 1.2109.1 - Open Redirection Date: 29-09-2021 Exploit Author: Hamza Khedr @ Accenture Austalia AARO Team Vendor Homepage: https://place.technology/ Software Link: https://github.com/PlaceOS Version: 1.29.10 Tested on: Ubuntu 20.04 CVE: CVE-2021-41826 PoC:...
CVE-2021-41826
PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessionscontroller.rb open redirect...
CVE-2021-41826
PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessionscontroller.rb open redirect...
CVE-2021-41826
Summary: CVE-2021-41826 affects PlaceOS Authentication Service prior to 1.29.10.0, enabling an open redirect via app/controllers/auth/sessions_controller.rb. The issue is corroborated by multiple connected sources (Nuclei template, Exploit-DB PoC, CNVD/CNNVD/CVE records). Impact: open redirect co...
PT-2021-23421
Name of the Vulnerable Software and Affected Versions PlaceOS Authentication Service versions prior to 1.29.10.0 Description The issue allows for an open redirect in the app/controllers/auth/sessions controller.rb file. Recommendations For versions prior to 1.29.10.0, update to version 1.29.10.0 ...
PlaceOs Authentication Service 输入验证错误漏洞
PlaceOs Authentication Service is a PlaceOs authentication service and Api gatekeeper. PlaceOs Authentication Service is vulnerable to an input validation error, which can be exploited by attackers to open redirects...
