Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:vvbbnn00:warp_clash_api:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Authentication Bypass in WARP-Clash-API via SECRET_KEY Manipulation

A publicly disclosed vulnerability in the WARP-Clash-API authorized function allows remote unauthenticated access by manipulating the SECRET_KEY argument.

WARP-Clash-API authentication-bypass api-security unmaintained-software
1t 1c