CERT24GHSA-r76f-83xj-prp9: replay of signed requests in YesWikiLoading data…
CERT24Threat Observatory
Period

GHSA-r76f-83xj-prp9: replay of signed requests in YesWiki

YesWiki versions from 4.6.2 before 4.7.0 lack replay protection in HttpSignatureService::verifySignature(). Captured signed requests can be replayed later to repeat actions.

← Back to intelligence

GHSA-r76f-83xj-prp9: replay of signed requests in YesWiki

YesWiki versions from 4.6.2 before 4.7.0 lack replay protection in HttpSignatureService::verifySignature(). Captured signed requests can be replayed later to repeat actions.