Sensitive Information Disclosure

cyberdrop-dl-patched is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper host validation that matches supported domains using substring checks, which allows an attacker to use a malicious lookalike domain and capture the user's API key through the Authorization...