Vendor
subzeroid
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.5
aiograpi: Unsafe signup challenge path handling
aiograpi is an asynchronous Instagram API for Python. aiograpi versions before 0.9.10 accepted server-supplied signup challenge paths and used them to build request URLs before validating that the paths were relative Instagram API paths. If an attacker can in…