Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/13 3:5 p.m.14 views

GHSA-9WMW-9WPH-2VWP Dagu: SSE Authentication Bypass in Basic Auth Mode

SSE Authentication Bypass in Basic Auth Mode Summary When Dagu is configured with HTTP Basic authentication DAGUAUTHMODE=basic, all Server-Sent Events SSE endpoints are accessible without any credentials. This allows unauthenticated attackers to access real-time DAG execution data, workflow...

7.5CVSS6AI score0.00778EPSS
SaveExploits1References6
Rows per page
Query Builder