Skip to content
OpenAdvisories

Vendor

ON24

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.7

    Authorization Bypass in ON24 Q&A chat

    A vulnerability of authorization bypass through user-controlled key in the 'console-survey/api/v1/answer/{EVENTID}/{TIMESTAMP}/' endpoint. Exploiting this vulnerability would allow an unauthenticated attacker to enumerate event IDs and obtain the complete Q&A…