Description
Nezha before 2.2.7 contains an information disclosure vulnerability in the GET /api/v1/profile endpoint that returns the bcrypt-hashed password field of authenticated users. Attackers can extract password hashes and perform offline cracking attacks without rate limiting or audit trail constraints.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| nezhahq | nezha | < 2.2.7 | 2.2.7 |
References
- GitHub Security Advisory (GHSA-8jhq-g4gw-rv5f) vendor-advisory
- VulnCheck Advisory: Nezha before 2.2.7 Information Disclosure via /api/v1/profile third-party-advisory