Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-67gx-c76c-v7wc

Опубликовано: 14 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 7.5

Описание

This vulnerability exists in RupeeWeb trading platform due to improper implementation of OTP validation mechanism in certain API endpoints. A remote attacker with valid credentials could exploit this vulnerability by manipulating API responses.

Successful exploitation of this vulnerability could allow the attacker to bypass Two-Factor Authentication (2FA) for other user accounts.

This vulnerability exists in RupeeWeb trading platform due to improper implementation of OTP validation mechanism in certain API endpoints. A remote attacker with valid credentials could exploit this vulnerability by manipulating API responses.

Successful exploitation of this vulnerability could allow the attacker to bypass Two-Factor Authentication (2FA) for other user accounts.

EPSS

Процентиль: 46%
0.00236
Низкий

7.5 High

CVSS4

Дефекты

CWE-302

Связанные уязвимости

nvd
12 месяцев назад

This vulnerability exists in RupeeWeb trading platform due to improper implementation of OTP validation mechanism in certain API endpoints. A remote attacker with valid credentials could exploit this vulnerability by manipulating API responses. Successful exploitation of this vulnerability could allow the attacker to bypass Two-Factor Authentication (2FA) for other user accounts.

EPSS

Процентиль: 46%
0.00236
Низкий

7.5 High

CVSS4

Дефекты

CWE-302