1 matches found
Signal K Server Vulnerable to Unauthenticated Information Disclosure via Exposed Endpoints
Note This is a separate issue from the RCE vulnerability State Pollution currently being patched. While related to tokensecurity.js, it involves different endpoints and risks. Summary An unauthenticated information disclosure vulnerability allows any user to retrieve sensitive system information,...
5.3CVSS6.2AI score0.00351EPSS
SaveExploits1References5Affected Software1
20