247 matches found
Klever-Go: /log controls global node logging
An unauthenticated client can connect to GET /log, send an arbitrary logger profile as the first WebSocket message, and mutate the node's global logging configuration before receiving live logs from the process. I confirmed this against a local validator built from this repository: an...
8.6CVSS6.1AI score0.00397EPSS
SaveExploits0References5Affected Software1
20