Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/26 11:2 p.m.16 views

Nezha Monitoring: Stored future DDNS profile ID allows unauthorized use of another user's DDNS profile context

Summary PATCH /server/id accepts and persists nonexistent ddnsprofiles IDs for a member-owned server. If another user later creates a DDNS profile with one of those IDs, the DDNS worker resolves the stored ID and dispatches an update using the other user's DDNS profile configuration in the contex...

6.4CVSS5.8AI score0.00228EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder