Unscored CVE-2022-40494 EUVD-2022-43769GHSA-xfw6-m86r-mwwx

NPS before v0.26.10 was discovered to contain an authentication bypass vulnerability via constantly generating and sending the Auth key and…

Published Oct 6, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

NPS before v0.26.10 was discovered to contain an authentication bypass vulnerability via constantly generating and sending the Auth key and Timestamp parameters.

References

https://github.com/1security/Vulnerability/blob/main/web/nps/1.md
https://blog.carrot2.cn/2022/08/cve-2022-40494.html