GHSA-5CF7-CXRF-MQ73 Bostr Improper Authorization vulnerability

Even with authorizedkeys is filled with allowed pubkeys, If noscraper is enabled, It will allow anyone to use bouncer even it's pubkey is not in authorizedkeys. Impact - Private bouncer Patches Available on version 3.0.10 Workarounds Disable noscraper if you have authorizedkeys being set in confi...

Bostr Improper Authorization vulnerability

Even with authorizedkeys is filled with allowed pubkeys, If noscraper is enabled, It will allow anyone to use bouncer even it's pubkey is not in authorizedkeys. Impact - Private bouncer Patches Available on version 3.0.10 Workarounds Disable noscraper if you have authorizedkeys being set in confi...

PT-2024-29665

Name of the Vulnerable Software and Affected Versions Bostr versions prior to 3.0.10 Description The issue allows unauthorized access to a private bouncer, even when authorized keys are set, if noscraper is enabled. This means that anyone can use the bouncer, regardless of whether their pubkey is...