Skip to content
OpenAdvisories

Product · OtterMind

Nubase

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.0

    OtterMind Nubase through 0.1.4 Missing Authentication in Storage Object API

    OtterMind Nubase through 0.1.4 contains a missing authentication vulnerability that allows unauthenticated attackers to access private bucket objects because /storage/v1/object/{bucketId}/{path} is treated as public for every HTTP method. Attackers knowing a …