Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:capgo:capgo.app:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Authorization Flaw in Capgo App Icon Update Path

An authorization vulnerability in the Capgo PUT /app/:id endpoint allows authenticated users to trick a privileged backend worker into overwriting restricted storage objects.

capgo.app web-application privilege-escalation cloud
1t 1c