Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:apipark:apipark:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Authorization Bypass in APIPark

APIPark versions through 1.9.7-beta are vulnerable to an authorization bypass allowing authenticated team managers to manipulate team IDs to access, modify, or delete resources belonging to other teams.

APIPark web-application-vulnerability authorization-bypass api-security
1r 1t 1c