EUVD-2024-55065

A flaw was found in the 3scale developer portal. This issue can allow account creation or updates passed through hidden or read-only fields, the contents of which may be altered. This flaw allows an attacker to access or modify restricted information...

CVE-2024-12125

The CVE-2024-12125 affects the 3scale Developer Portal. The flaw allows account creation or updates where fields configured as read-only or hidden can be modified, exposing restricted information. Root cause: server-side validation does not enforce read-only/hidden constraints on account operatio...

Insufficient Session Expiration

Overview payload is a Node, React and MongoDB Headless CMS and Application Framework Affected versions of this package are vulnerable to Insufficient Session Expiration due to the reuse of user identifiers in the account creation process. An attacker can gain unauthorised access to a newly create...

Fusen News 3.3 Account Add Vulnerability

Author: DarkKnight My site: http://www.insecureonline.com Product: Fusen News 3.3 maybe lower Side Note: This vulnerability is for an OLD VERSION of Fusen News. The only reason I'm posting this is because I still see people using Fusen News 3.3. Vendors: Not contacted Upgrade available with fix A...