Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:sync_in:server:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Sync-in Server 2FA Bypass via Token API

Sync-in Server v2.3.0 and earlier is vulnerable to a 2FA bypass in the /api/auth/token endpoint, allowing attackers with known credentials to obtain unrestricted JWTs without providing TOTP codes.

Sync-in Server 2fa-bypass authentication-bypass webserver
1r 1t 1c