Skip to content
OpenAdvisories

Vendor

effectindex

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.1

    effectindex/tripreporter vulnerable to improper password verification on POST `/api/v1/account/login`

    `effectindex/tripreporter` is a community-powered, universal platform for submitting and analyzing trip reports. Prior to commit bd80ba833b9023d39ca22e29874296c8729dd53b, any user with an account on an instance of `effectindex/tripreporter`, e.g. `subjective.…