Skip to content
OpenAdvisories

Vendor

moghtech

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.4

    Komodo Resource Identifier Disclosure and Audit Log Pollution Before Permission Check

    Komodo through 2.3.2 discloses internal resource identifiers and writes audit entries before performing permission checks in the /execute and /execute/{variant} handlers. Authenticated users can guess resource names to obtain internal identifiers and insert f…