Skip to content
OpenAdvisories

Vendor

Mailerup

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.8

    Unauthenticated self-registration in MailerUp allows access to stored email data

    Missing Authentication for Critical Function (CWE-306) in the RegisterView (apps/accounts/views.py), exposed at POST /api/auth/register/, in MailerUp <1.0.1 allows a remote, unauthenticated attacker to self-register a working account on instances where regist…