Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/08/18 8:51 p.m.•20 views

Lemur: Unchecked `replaces[]` lets any user silence notifications and hijack auto-rotation for arbitrary certificates

Summary Repo under test: https://github.com/Netflix/lemur The certificate create and upload endpoints accept a replaces alias replacements array that is resolved to live Certificate ORM objects with no ownership or CertificatePermission check on the referenced certificates. The SQLAlchemy...

8.1CVSS5.8AI score0.00317EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder