Skip to content
OpenAdvisories

Vendor

haiwen

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.1

    Seahub through 14.0.10 Predictable Share Link Passwords via Batch Endpoint

    Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post() that generates batch share link passwords using Python's non-cryptographic random.choices(). Authenticated users permitted to create share links can request many ge…