Skip to content
OpenAdvisories

Vendor

l429609201

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    Misaka Danmu Server through 2.8.9 Authentication Bypass via Config-History Rollback

    Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to write arbitrary configuration keys via the unprotected POST /api/ui/config-history/rollback endpoint. Attackers can set the ipWhitelist …