Ubiquiti Inc.: Exposed API-key allows to control nightly builds of firmwares (█████████ & ████████)

The researcher found a public API token that was mistakenly granted full-access permission, which allowed the creation/overwrite of nightly builds of UniFi Firmware. Publicly available api-key granted full access permissions to API that controls nightly builds of Ubiquiti firmwares, i.e. it was...