Skip to content
Threat Feed
Subscribe

Product

WARP-Clash-API (<= C7bf2360073959861219b422e51ae86411051b46)

1 brief RSS
high advisory

Authentication Bypass in WARP-Clash-API via SECRET_KEY Manipulation

A publicly disclosed vulnerability in the WARP-Clash-API authorized function allows remote unauthenticated access by manipulating the SECRET_KEY argument.

WARP-Clash-API authentication-bypass api-security unmaintained-software
1t 1c