Vendor
Spacebar Server
3 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.1
Spacebar Server Missing Authorization via Group DM Recipient Endpoint
Spacebar Server before commit dcfd910 contains a missing authorization vulnerability that allows any authenticated attacker to add themselves to arbitrary group DM channels by sending a PUT request to the channels recipient endpoint without membership verific…