Description
The admin panel for Obl.ong before 1.1.2 allows authorization bypass because the email OTP feature accepts arbitrary numerical values.
Unscored
CVE-2023-46754
EUVD-2023-50921GHSA-pj99-jgm5-c727
The admin panel for Obl.ong before 1.1.2 allows authorization bypass because the email OTP feature accepts arbitrary numerical values.
Published Oct 26, 2023 · Updated Oct 29, 2024 · Assigned by mitre