CVE-2023-31123

effectindex/tripreporter is a community-powered, universal platform for submitting and analyzing trip reports. Prior to commit bd80ba833b9023d39ca22e29874296c8729dd53b, any user with an account on an instance of effectindex/tripreporter, e.g. subjective.report, may be affected by an improper...

CVE-2023-31123

effectindex/tripreporter is a community-powered, universal platform for submitting and analyzing trip reports. Prior to commit bd80ba833b9023d39ca22e29874296c8729dd53b, any user with an account on an instance of effectindex/tripreporter, e.g. subjective.report, may be affected by an improper...

CVE-2023-31123 effectindex/tripreporter vulnerable to improper password verification on POST `/api/v1/account/login`

effectindex/tripreporter is a community-powered, universal platform for submitting and analyzing trip reports. Prior to commit bd80ba833b9023d39ca22e29874296c8729dd53b, any user with an account on an instance of effectindex/tripreporter, e.g. subjective.report, may be affected by an improper...

CVE-2023-31123 effectindex/tripreporter vulnerable to improper password verification on POST `/api/v1/account/login`

effectindex/tripreporter is a community-powered, universal platform for submitting and analyzing trip reports. Prior to commit bd80ba833b9023d39ca22e29874296c8729dd53b, any user with an account on an instance of effectindex/tripreporter, e.g. subjective.report, may be affected by an improper...

CVE-2023-31123

The CVE-2023-31123 entry concerns the project effectindex/tripreporter . Affected component: login flow, specifically POST /api/v1/account/login. Root cause: improper password verification before the commit bd80ba833b9023d39ca22e29874296c8729dd53b, enabling any user whose password meets the requi...

tripreporter 授权问题漏洞

tripreporter is a community-driven, general-purpose platform for submitting and analyzing trip reports. effectindex tripreporter bd80ba833b9023d39ca22e29874296c8729dd53b A vulnerability in authorization issues exists in previous versions, which stems from allowing any user whose password meets th...