Skip to content
OpenAdvisories

Vendor

Lif-Platforms

3 known vulnerabilities.

Products

Lif-Auth-Server 2 New-Ringer-Server 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2024-47768

    Lif Authentication Server Has No Auth Check When Updating Password In Account Recovery

    Lif Authentication Server is a server used by Lif to do various tasks regarding Lif accounts. This vulnerability has to do with the account recovery system where there does not appear to be a check to make sure the user has been sent the recovery email and en…

    Lif-Platforms Lif-Auth-Server
  • Medium 4.2
    CVE-2023-49801

    Lif Auth Server vulnerable to uncontrolled data in path expression

    Lif Auth Server is a server for validating logins, managing information, and account recovery for Lif Accounts. The issue relates to the `get_pfp` and `get_banner` routes on Auth Server. The issue is that there is no check to ensure that the file that Auth Se…

    Lif-Platforms Lif-Auth-Server