6076 matches found
ECHO-D67B-10D3-32FC Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-33EA-8335-42C0
Bulletin has no description...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization through the PUT /api/echo/like/:id endpoint, which lacks authentication and rate limiting. An attacker can manipulate the favcount of any echo, including private ones, by sending repeated requests without...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization through the PUT /api/echo/like/:id endpoint, which lacks authentication and rate limiting. An attacker can manipulate the favcount of any echo, including private ones, by sending repeated requests without...
GHSA-PJ6Q-4VQ4-R8CG Ech0 allows PUT /api/echo/like/:id unauthenticated: anonymous callers to modify any echo's fav_count
Summary PUT /api/echo/like/:id at internal/router/echo.go:12 is registered on PublicRouterGroup with no authentication and no rate limit. Anonymous callers increment the favcount counter on any echo including private echoes by UUID, repeat the request without deduplication, and trigger a database...
ECHO-C13C-F4B9-2ECE
Bulletin has no description...
ECHO-71BE-89BB-7761
Bulletin has no description...
ECHO-A2CB-9FEB-100C
Bulletin has no description...
ECHO-04E0-8CCC-E285 Fixed versions now available from upstream sources
Bulletin has no description...
ECHO-1C52-724C-58AD
Bulletin has no description...
ECHO-784C-565E-18BC
Bulletin has no description...
ECHO-FC38-DA22-1AFB
Bulletin has no description...
ECHO-B644-E810-F4A8
Bulletin has no description...
ECHO-23A0-2B3B-D853
Bulletin has no description...
ECHO-AE5E-0A53-0B5F
Bulletin has no description...
ECHO-1B4F-33AA-905B
Bulletin has no description...
ECHO-EF8A-73B7-DF80
Bulletin has no description...
ECHO-2289-ED41-D73F
Bulletin has no description...