Vendor
beizhu-1209
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.4
AIHelms through 0.1.25 Missing Authorization in Efficiency Analytics API
AIHelms through 0.1.25 contains a missing authorization vulnerability in apps/api/v1/efficiency.py that allows authenticated low-privileged users to bypass efficiency:read and efficiency:write permission checks. Attackers can query routes like /cost/detail, /…