Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x6gw-c4hj-p3rx

Опубликовано: 22 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Insecure Direct Object Reference (IDOR) vulnerability in Deepfiction AI (deepfiction.ai) thru June 3, 2025, allowing attackers to chat with the LLM using other users' credits via sensitive information gained by the /browse/stories endpoint.

Insecure Direct Object Reference (IDOR) vulnerability in Deepfiction AI (deepfiction.ai) thru June 3, 2025, allowing attackers to chat with the LLM using other users' credits via sensitive information gained by the /browse/stories endpoint.

EPSS

Процентиль: 12%
0.00041
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 6.5
nvd
7 месяцев назад

Insecure Direct Object Reference (IDOR) vulnerability in Deepfiction AI (deepfiction.ai) thru June 3, 2025, allowing attackers to chat with the LLM using other users' credits via sensitive information gained by the /browse/stories endpoint.

EPSS

Процентиль: 12%
0.00041
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-639