Vendor
getfider
3 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.6
Fider: Cross-Tenant Authentication Bypass via Missing tenant_id Filter in getVerificationByKey
Fider is a feedback portal for feature requests and suggestions. Prior to version 0.36.0, in multi-tenant mode (HOST_MODE=multi), an attacker can use an email verification key issued by Tenant A to authenticate as the same email address on Tenant B. This comp…