1 matches found
Missing Authorization
changedetectionio is vulnerable to Missing Authorization. The vulnerability is due to a missing annotation @auth.checktoken on the WatchHistory API endpoint /api/v1/watch//history. This can allows an unauthorized actor to access the endpoint without providing a x-api-key header and and check a...
3.7CVSS6.7AI score0.00587EPSS
SaveExploits1References3Affected Software1
20