4121 matches found
ECHO-37BD-48CD-23B4
Bulletin has no description...
ECHO-D67B-10D3-32FC
Bulletin has no description...
ECHO-33EA-8335-42C0
Bulletin has no description...
GHSA-PJ6Q-4VQ4-R8CG Ech0 allows PUT /api/echo/like/:id unauthenticated: anonymous callers to modify any echo's fav_count
Summary PUT /api/echo/like/:id at internal/router/echo.go:12 is registered on PublicRouterGroup with no authentication and no rate limit. Anonymous callers increment the favcount counter on any echo including private echoes by UUID, repeat the request without deduplication, and trigger a database...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization through the PUT /api/echo/like/:id endpoint, which lacks authentication and rate limiting. An attacker can manipulate the favcount of any echo, including private ones, by sending repeated requests without...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization through the PUT /api/echo/like/:id endpoint, which lacks authentication and rate limiting. An attacker can manipulate the favcount of any echo, including private ones, by sending repeated requests without...
ECHO-C13C-F4B9-2ECE
Bulletin has no description...
ECHO-71BE-89BB-7761 From https://github.com/nltk/nltk/commit/1c3f799607eeb088cab2491dcf806ae83c29ad8f
Bulletin has no description...
ECHO-A2CB-9FEB-100C From https://github.com/nltk/nltk/pull/3468 (merge commit 1056b32).
Bulletin has no description...
ECHO-04E0-8CCC-E285
Bulletin has no description...
ECHO-1C52-724C-58AD
Bulletin has no description...
ECHO-784C-565E-18BC
Bulletin has no description...
ECHO-FC38-DA22-1AFB
Bulletin has no description...
ECHO-B644-E810-F4A8
Bulletin has no description...
ECHO-23A0-2B3B-D853
Bulletin has no description...
ECHO-AE5E-0A53-0B5F
Bulletin has no description...
ECHO-1B4F-33AA-905B
Bulletin has no description...
ECHO-EF8A-73B7-DF80
Bulletin has no description...
ECHO-4C7E-45A5-A6C9
Bulletin has no description...
ECHO-2289-ED41-D73F
Bulletin has no description...