Vendor
Mailerup
2 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.8
Unauthenticated self-registration in MailerUp allows access to stored email data
Missing Authentication for Critical Function (CWE-306) in the RegisterView (apps/accounts/views.py), exposed at POST /api/auth/register/, in MailerUp <1.0.1 allows a remote, unauthenticated attacker to self-register a working account on instances where regist…