6 matches found
MINI-MH55-98J7-4JM6
Bulletin has no description...
CGA-557H-J3HV-9HFX
Bulletin has no description...
CGA-89QX-2HPH-W2V7
Bulletin has no description...
GHSA-J4XF-96QF-RX69 OpenClaw has a Feishu allowFrom authorization bypass via display-name collision
Summary Feishu allowlist authorization could be bypassed by display-name collision. Details channels.feishu.allowFrom is documented as an ID-based allowlist openid list, but Feishu policy matching accepted mutable sender display names in the same namespace. An attacker could set a display name...
OpenClaw has a Feishu allowFrom authorization bypass via display-name collision
Summary Feishu allowlist authorization could be bypassed by display-name collision. Details channels.feishu.allowFrom is documented as an ID-based allowlist openid list, but Feishu policy matching accepted mutable sender display names in the same namespace. An attacker could set a display name...
