Vendor
haiwen
3 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Low 3.1
Seahub through 14.0.10 Predictable Share Link Passwords via Batch Endpoint
Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post() that generates batch share link passwords using Python's non-cryptographic random.choices(). Authenticated users permitted to create share links can request many ge…