Skip to content
Threat Feed
Subscribe

Tag

Unmaintained-Software

1 brief RSS
high advisory

Authentication Bypass in WARP-Clash-API via SECRET_KEY Manipulation

A publicly disclosed vulnerability in the WARP-Clash-API authorized function allows remote unauthenticated access by manipulating the SECRET_KEY argument.

WARP-Clash-API authentication-bypass api-security unmaintained-software
1t 1c