Skip to content
OpenAdvisories

Vendor

Spacebar Server

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.1

    Spacebar Server Missing Authorization via Group DM Recipient Endpoint

    Spacebar Server before commit dcfd910 contains a missing authorization vulnerability that allows any authenticated attacker to add themselves to arbitrary group DM channels by sending a PUT request to the channels recipient endpoint without membership verific…