Skip to content
OpenAdvisories

Vendor

IoTSharp

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 4.3

    IoTSharp through 3.6.1 Cross-Tenant Data Exposure via Customers and Devices APIs

    IoTSharp through 3.6.1 contains an insecure direct object reference vulnerability that allows any authenticated user to read other tenants' data because Customers and Devices API handlers do not scope queries to the caller's tenant. Attackers can self-registe…