9 matches found
pytonapi has a Webhook Custom Path Authentication Bypass
Webhook Custom Path Authentication Bypass in pytonapi SummaryTonapiWebhookDispatcher in pytonapi 2.2.0 fails to validate the Authorization header when a webhook handler is registered with the documented path= argument. During setup, bearer tokens are stored only under the default suffix paths e.g...
7.5CVSS5.8AI score0.00709EPSS
SaveExploits0References7Affected Software1
20