Skip to content
OpenAdvisories

Vendor

pig-mesh

5 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.1

    pig before 4.1.0 Unverified Password Change via /register/password

    pig before 4.1.0 contains an authentication bypass vulnerability in the /register/password endpoint where password verification results are discarded, allowing any value as the current password. Remote attackers can submit a username with an incorrect current…