Tag

Rest-Api

2 briefs RSS

WeKan Missing Authorization Vulnerability in Integration REST API

WeKan before 8.35 contains a missing authorization vulnerability in the Integration REST API endpoints, allowing authenticated board members to perform administrative actions without proper privilege verification, potentially leading to unauthorized data access and modification.

WeKan missing-authorization rest-api privilege-escalation

2r 1t 1c 4i 1w ago

high advisory

666ghj MiroFish REST API Authentication Bypass (CVE-2026-7042)

2 rules 1 TTP 1 CVE

A missing authentication vulnerability (CVE-2026-7042) exists in 666ghj MiroFish up to version 0.1.2, allowing remote attackers to bypass authentication via manipulation of the REST API Endpoint's create_app function.

MiroFish cve-2026-7042 authentication-bypass rest-api

2r 1t 1c Jan 3, 2024