1 matches found
OliveTin has Unauthenticated Action Termination via KillAction When Guests Must Login
Summary OliveTin allows an unauthenticated guest to terminate running actions through KillAction even when authRequireGuestsToLogin: true is enabled. In the tested release 3000.10.2, guests are correctly blocked from dashboard access, but an still call the KillAction RPC directly and successfully...
7.5CVSS6.1AI score0.0065EPSS
SaveExploits1References5Affected Software1
20