Lucene search
+L

1 matches found

Snyk
Snyk
added 2026/05/11 7:15 p.m.9 views

User Impersonation

Overview @openclaw/crabbox-plugin is an OpenClaw plugin for running Crabbox remote testbox workflows Affected versions of this package are vulnerable to User Impersonation in the verifyUserToken function. An attacker can gain unauthorized administrative access by injecting an admin claim into a...

8.8CVSS5.5AI score0.00382EPSS
SaveExploits0References2
Rows per page
Query Builder