Tag
Mooncake versions through 0.3.13.post1 contain an authentication bypass in the HTTP metadata server, allowing unauthenticated attackers to manipulate transfer engine keys, redirect data, or trigger denial-of-service.