Skip to content
Threat Feed
Subscribe

Product

Pyload-Ng (>= 0.5.0b3.dev1, <= 0.5.0b3.dev101)

1 brief RSS
high advisory

Authentication Bypass and Brute-Force Oracle in pyload-ng

An insecure permission check in the pyload-ng API allows any authenticated user to perform administrative password brute-forcing via a side-channel oracle.

pyload-ng +1 credential-access authentication-bypass web-application
2t