getnora-io NORA authorization issue vulnerability

Versions of getnora-io NORA prior to 0.9.5 contain an authorization issue vulnerability. This vulnerability arises because the token management interface validates write permissions only without requiring administrative authorization. As a result, it is possible to read tokens and enumerate other...

Pig security vulnerabilities

pig is a privilege management system of pig-mesh open source. A security vulnerability exists in pig 3.8.2 and earlier versions. The vulnerability stems from an improper privilege validation issue in the token query interface /api/admin/sys-token/page of the token management function in the syste...