frangoteam FUXA /api/runscript authorization bypass vulnerability

Summary A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA versions: 1.3.2-2809. A specially crafted HTTP request can lead to execute priviledged operation. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. Confirmed Vulnerabl...