Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/02 9:42 p.m.16 views

OliveTin has Unauthenticated Action Termination via KillAction When Guests Must Login

Summary OliveTin allows an unauthenticated guest to terminate running actions through KillAction even when authRequireGuestsToLogin: true is enabled. In the tested release 3000.10.2, guests are correctly blocked from dashboard access, but an still call the KillAction RPC directly and successfully...

7.5CVSS6.1AI score0.0065EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder