Skip to content
OpenAdvisories

Vendor

didi

5 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.8

    KnowStreaming through 3.4.1 Missing Authorization on the REST API

    KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated user to access protected functionality. Attackers can call identity-management endpoints to create administrator accounts or grant themsel…

  • High 7.3

    didi DDMQ Console Module improper authentication

    A vulnerability has been found in didi DDMQ 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Console Module. The manipulation with the input /;login leads to improper authentication. The attack can be…