2 matches found
Unauthorized Information Disclosure
@haxtheweb/open-apis is vulnerable to unauthenticated information disclosure. The vulnerability is due to improper access control on the haxPsuUsage API endpoint, allowing remote unauthenticated users to retrieve a list of PSU websites hosted on HAX CMS...
5.3CVSS5AI score0.00313EPSS
SaveExploits0References3Affected Software1
20