Description
A vulnerability was found in harry0703 MoneyPrinterTurbo up to 1.2.6 and classified as critical. Affected by this issue is the function verify_token of the file app/controllers/base.py of the component API Endpoint. The manipulation leads to missing authentication. The attack may be launched remotely.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| harry0703 | MoneyPrinterTurbo | 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6 | — |
References
- VDB-317012 | harry0703 MoneyPrinterTurbo API Endpoint base.py verify_token missing authentication vdb-entry technical-description
- VDB-317012 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #609040 | Harry Yu MoneyPrinterTurbo v1.2.6 未授权访问 third-party-advisory