5 matches found
GHSA-72H8-WP98-7HCH Unleash: Missing await on permission check + cross-project IDOR in admin API
Summary Multiple authorization vulnerabilities in Unleash admin API, including a critical missing await that completely bypasses a permission check. Vulnerability 1: Missing await on Permission Check HIGH File: src/lib/features/segment/segment-controller.ts line 345 POST...
7.1CVSS5.9AI score0.00484EPSS
SaveExploits0References8
20