Vendor
HDInnovations
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 4.3
UNIT3D through 9.2.0 Private Playlist Disclosure via Playlist Zip Download
UNIT3D through 9.2.0 contains a missing authorization vulnerability in PlaylistZipController::show that allows authenticated users to download other members' private playlists. Attackers can enumerate sequential playlist ids at the /playlist-zips/{playlist} e…