Skip to content
OpenAdvisories

Vendor

Stonewuu

4 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Stonewuu ai-fusion-video before 1.3.0 IDOR via Project, Asset and Script Controllers

    Stonewuu ai-fusion-video before 1.3.0 contains an insecure direct object reference vulnerability that allows authenticated users to access other users' projects by supplying unscoped object ids. Attackers can enumerate auto-increment ids on /api/project, /api…