1 matches found
GHSA-3FCR-JVGP-7F58 pytonapi has a Webhook Custom Path Authentication Bypass
Webhook Custom Path Authentication Bypass in pytonapi Summary TonapiWebhookDispatcher in pytonapi 2.2.0 fails to validate the Authorization header when a webhook handler is registered with the documented path= argument. During setup, bearer tokens are stored only under the default suffix paths...
7.5CVSS6.1AI score0.0042EPSS
SaveExploits0References6
20