Vendor
sct
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.4
Overseerr 1.35.0 Authorization Bypass via pushSubscriptions API
Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerability in the push subscription API that allows authenticated users to list, read, and delete any other user's push subscriptions by supplying an arbitrary userId in …