2 matches found
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization due to missing authorization checks in state-changing routes. An attacker can upload or delete files, create directories, and remove access control policies by sending unauthenticated requests to endpoints such as...
9.8CVSS8.5AI score0.00651EPSS
SaveExploits1References2
20