Vendor
The MOOSDB HTTP server in core-moos versions 10.4.0 and earlier contains an authentication bypass vulnerability allowing unauthenticated remote attackers to modify MOOS variables via crafted HTTP requests.