Skip to content
OpenAdvisories

Product · mateaix

MateCloud

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.1

    MateCloud through 5.0.8 Missing Authorization via /api/v1/admin/storage API

    MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supp…