Skip to content
OpenAdvisories

Product · Microsoft

onefuzz

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2021-37705

    Improper Authorization and Origin Validation Error in OneFuzz

    OneFuzz is an open source self-hosted Fuzzing-As-A-Service platform. Starting with OneFuzz 2.12.0 or greater, an incomplete authorization check allows an authenticated user from any Azure Active Directory tenant to make authorized API calls to a vulnerable On…

    Microsoft onefuzz onefuzz PyPI