1 result · Clear filters · Feed
-
High 7.0
OtterMind Nubase through 0.1.4 Missing Authentication in Storage Object API
OtterMind Nubase through 0.1.4 contains a missing authentication vulnerability that allows unauthenticated attackers to access private bucket objects because /storage/v1/object/{bucketId}/{path} is treated as public for every HTTP method. Attackers knowing a …