Description
OneUptime is a solution for monitoring and managing online services. The resend-verification-code endpoint allows any authenticated user to trigger a verification code resend for any UserWhatsApp record by ID. Ownership is not validated (unlike the verify endpoint). This affects the UserWhatsAppAPI.ts endpoint and the UserWhatsAppService.ts service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OneUptime | oneuptime | < 10.0.21 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @oneuptime/common | < 10.0.21 | 10.0.21 | GHSA-cw6x-mw64-q6pv |