Skip to content
OpenAdvisories

Product · didi

KnowStreaming

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    KnowStreaming through 3.4.1 Missing Authorization on the REST API

    KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated user to access protected functionality. Attackers can call identity-management endpoints to create administrator accounts or grant themsel…