1 matches found
Unauthenticated views may expose information to anonymous users
ImpactA number of Nautobot URL endpoints were found to be improperly accessible to unauthenticated anonymous users, including the following:- /api/graphql/ 1- /api/users/users/session/ Nautobot 2.x only; the only information exposed to an anonymous user is which authentication backend classes are...
5.3CVSS5.8AI score0.00628EPSS
SaveExploits0References11Affected Software1
20