Описание
A security issue in the runtime event system allows unauthenticated connections to receive a reusable API token. This token is broadcasted over a WebSocket and can be intercepted by any local client listening on the connection.
EPSS
Процентиль: 5%
0.0002
Низкий
Дефекты
CWE-200
Связанные уязвимости
github
6 месяцев назад
A security issue in the runtime event system allows unauthenticated connections to receive a reusable API token. This token is broadcasted over a WebSocket and can be intercepted by any local client listening on the connection.
EPSS
Процентиль: 5%
0.0002
Низкий
Дефекты
CWE-200