Vendor
APIParkLab
2 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.3
APIPark through 1.9.7-beta IDOR via application authorization endpoints
APIPark through 1.9.7-beta contains an insecure direct object reference vulnerability that allows authenticated users to read other applications' credentials by supplying a foreign authorization UUID. Attackers with authorization-view permission on one applic…