Skip to content
OpenAdvisories

Product · lejianwen

rustdesk-api

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    rustdesk-api through 2.7 Authorization Bypass via POST /api/sysinfo

    rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device ID to POST /api/sysinfo. Attackers can overwrite hostname, username, OS and uuid…