Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2026/04/02 8:59 p.m.•28 views

OpenClaw: Zalo webhook replay cache cross-target messageId scope bypass

Summary Zalo webhook replay cache cross-target messageId scope bypass Current Maintainer Triage - Status: narrow - Normalized severity: low - Assessment: v2026.3.28 replay dedupe is still keyed too broadly, but the issue should stay scoped to authenticated sibling-target delivery paths rather tha...

5.4CVSS6AI score0.00367EPSS
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa
•added 2026/04/02 8:59 p.m.•26 views

GHSA-HHQ4-97C2-P447 OpenClaw: Zalo webhook replay cache cross-target messageId scope bypass

Summary Zalo webhook replay cache cross-target messageId scope bypass Current Maintainer Triage - Status: narrow - Normalized severity: low - Assessment: v2026.3.28 replay dedupe is still keyed too broadly, but the issue should stay scoped to authenticated sibling-target delivery paths rather tha...

4.2CVSS6AI score0.00367EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/04/02 12:00 a.m.•9 views

PT-2026-32211

Summary Zalo webhook replay cache cross-target messageId scope bypass Current Maintainer Triage - Status: narrow - Normalized severity: low - Assessment: v2026.3.28 replay dedupe is still keyed too broadly, but the issue should stay scoped to authenticated sibling-target delivery paths rather tha...

5.4CVSS6AI score0.00367EPSS
SaveExploits0References7
Rows per page
Query Builder