PT-2024-28950 · Unknown · Fastapi Opa

Name of the Vulnerable Software and Affected Versions: Fastapi OPA versions prior to 2.0.1 Description: The issue allows unauthenticated attackers to discover which entities exist within an application by sending HTTP OPTIONS requests. This is because OpaMiddleware allows all HTTP OPTIONS request...