Skip to content
Threat Feed
Subscribe

Product

Devtron (<= 2.2.0)

1 brief RSS
high advisory

Devtron Authorization Bypass in Webhook API

Devtron versions 2.2.0 and earlier contain an authorization flaw in the orchestrator webhook endpoint that allows authenticated users to retrieve plaintext super-admin API tokens.

Devtron vulnerability privilege-escalation credential-access
1r 1t 1c