Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9mhq-xcrq-xc75

Опубликовано: 10 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiting the SetUser method or can exploit the Race Condition in the authentication message.

An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiting the SetUser method or can exploit the Race Condition in the authentication message.

EPSS

Процентиль: 60%
0.00394
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-305
CWE-362

Связанные уязвимости

CVSS3: 5.9
nvd
больше 2 лет назад

An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiting the SetUser method or can exploit the Race Condition in the authentication message.

EPSS

Процентиль: 60%
0.00394
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-305
CWE-362