CVE-2019-12890

RedwoodHQ 2.5.5 does not require any authentication for database operations, which allows remote attackers to create admin users via a con.automationframework users insertone call...

CVE-2019-12890

RedwoodHQ 2.5.5 is affected by an authentication bypass in its database operations. The root cause is a lack of authentication for certain database actions, enabling remote attackers to insert admin users via the con.automationframework users insert_one call. As described across multiple sources,...