1 matches found
Ory Keto has a SQL injection via forged pagination tokens
Description The GetRelationships API in Ory Keto is vulnerable to SQL injection due to flaws in its pagination implementation. Pagination tokens are encrypted using the secret configured in secrets.pagination. An attacker who knows this secret can craft their own tokens, including malicious token...
7.2CVSS6.2AI score0.00229EPSS
SaveExploits0References3Affected Software1
20