Lucene search
+L

12 matches found

Github Security Blog
Github Security Blog
added 2026/04/10 7:49 p.m.8 views

Ech0's Missing Authorization on System Logs Allows Non-Admin Information Disclosure

Summary The system log endpoints GET /api/system/logs, GET /api/system/logs/stream, WS /ws/system/logs lack authorization checks, allowing any authenticated non-admin user to read and stream all server logs. These logs contain error stack traces, internal file paths, module names, and arbitrary...

5.9AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder