Skip to content
OpenAdvisories

Vendor

niefy

1 known vulnerabilities.

Products

wx-api 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2026-111699

    Niefy wx-api through 0.8.2 Authentication Bypass via Unverified openid Cookie

    Niefy wx-api through 0.8.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to impersonate WeChat fans by supplying a raw openid cookie to fan-facing controllers. Attackers knowing a victim's openid can call /wxUser/getUse…

    niefy wx-api