CVE-2024-45036

CVE-2024-45036 affects Shopify/Tophat, an open source mobile application testing harness. Affected versions are prior to 1.10.0 and involve an improper access control flaw that can expose the TOPHAT_APP_TOKEN stored in ~/.tophatrc when a malicious Tophat URL is used, enabling the attacker to send...

CVE-2024-45036 Improper Access Control Vulnerability When Accessing a Maliciously Crafted Tophat Link

Tophat is a mobile applications testing harness. An Improper Access Control vulnerability can expose the TOPHATAPPTOKEN token stored in /.tophatrc through use of a malicious Tophat URL controlled by the attacker. The vulnerability allows Tophat to send this token to the attacker's server without...