Skip to content
OpenAdvisories

Vendor

beizhu-1209

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.4

    AIHelms through 0.1.25 Missing Authorization in Efficiency Analytics API

    AIHelms through 0.1.25 contains a missing authorization vulnerability in apps/api/v1/efficiency.py that allows authenticated low-privileged users to bypass efficiency:read and efficiency:write permission checks. Attackers can query routes like /cost/detail, /…