Skip to content
OpenAdvisories
Medium · 5.9 CVE-2023-28126 EUVD-2023-31837GHSA-9mhq-xcrq-xc75

An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiti…

Published May 9, 2023 · Updated Jan 29, 2025 · Assigned by hackerone

Description

An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiting the SetUser method or can exploit the Race Condition in the authentication message.

Affected products

VendorProductAffectedFixed
— Avalanche Avalanche versions 6.3.x and below —

References