Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/02 8:59 p.m.12 views

OpenClaw: Zalo webhook replay cache cross-target messageId scope bypass

Summary Zalo webhook replay cache cross-target messageId scope bypass Current Maintainer Triage - Status: narrow - Normalized severity: low - Assessment: v2026.3.28 replay dedupe is still keyed too broadly, but the issue should stay scoped to authenticated sibling-target delivery paths rather tha...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder