1 matches found
Jitsu authorization issue vulnerability
Versions prior to jitsu 2.14.0-beta.41 contain an authorization issue vulnerability. This vulnerability arises because the sources/state.ts handler fails to use await when calling findFirst; as a result, ownership checks for sync IDs never fail. Consequently, authenticated users can read,...
4.2CVSS5.9AI score0.00169EPSS
SaveExploits0References6
20