Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/04/02 8:59 p.m.11 views

OpenClaw: Zalo webhook replay cache cross-target messageId scope bypass

Summary Zalo webhook replay cache cross-target messageId scope bypass Current Maintainer Triage - Status: narrow - Normalized severity: low - Assessment: v2026.3.28 replay dedupe is still keyed too broadly, but the issue should stay scoped to authenticated sibling-target delivery paths rather tha...

5.4CVSS6AI score0.00266EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/04/02 8:59 p.m.9 views

GHSA-HHQ4-97C2-P447 OpenClaw: Zalo webhook replay cache cross-target messageId scope bypass

Summary Zalo webhook replay cache cross-target messageId scope bypass Current Maintainer Triage - Status: narrow - Normalized severity: low - Assessment: v2026.3.28 replay dedupe is still keyed too broadly, but the issue should stay scoped to authenticated sibling-target delivery paths rather tha...

4.2CVSS5.9AI score0.00266EPSS
SaveExploits0References6
Rows per page
Query Builder