Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2024/08/02 1:20 a.m.28 views

Bostr Improper Authorization vulnerability

Even with authorizedkeys is filled with allowed pubkeys, If noscraper is enabled, It will allow anyone to use bouncer even it's pubkey is not in authorizedkeys. Impact - Private bouncer Patches Available on version 3.0.10 Workarounds Disable noscraper if you have authorizedkeys being set in confi...

6.3CVSS4.6AI score0.00297EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2024/08/02 1:20 a.m.45 views

GHSA-5CF7-CXRF-MQ73 Bostr Improper Authorization vulnerability

Even with authorizedkeys is filled with allowed pubkeys, If noscraper is enabled, It will allow anyone to use bouncer even it's pubkey is not in authorizedkeys. Impact - Private bouncer Patches Available on version 3.0.10 Workarounds Disable noscraper if you have authorizedkeys being set in confi...

5.1CVSS5.4AI score0.00297EPSS
SaveExploits0References6
Rows per page
Query Builder