Cpe:2.3:a:rilldata:rill:0.90.5:*:*:*:*:*:*:*

Rill versions 0.77.0 through 0.90.5 contain a missing authorization vulnerability that allows attackers to obtain non-expiring API tokens with elevated permissions via unauthorized OAuth code issuance.