Skip to content
OpenAdvisories

Vendor

sct

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.4

    Overseerr 1.35.0 Authorization Bypass via pushSubscriptions API

    Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerability in the push subscription API that allows authenticated users to list, read, and delete any other user's push subscriptions by supplying an arbitrary userId in …