PT-2024-31386 · Tophat · Tophat

Name of the Vulnerable Software and Affected Versions: Tophat versions prior to 1.10.0 Description: The issue is related to an Improper Access Control vulnerability that can expose the TOPHAT APP TOKEN token stored in /.tophatrc through the use of a malicious Tophat URL controlled by the attacker...