1 matches found
GHSA-9V8P-FRVJ-2PCM Klever-Go: /log controls global node logging
An unauthenticated client can connect to GET /log, send an arbitrary logger profile as the first WebSocket message, and mutate the node's global logging configuration before receiving live logs from the process. I confirmed this against a local validator built from this repository: an...
8.6CVSS6.2AI score0.00397EPSS
SaveExploits0References5
20