CVE-2023-46754

Published
View on NVD ↗
CVSS v3
5.3
MEDIUM
CVSS v2
N/A
Affected
1
PROJECT

Description

The admin panel for Obl.ong before 1.1.2 allows authorization bypass because the email OTP feature accepts arbitrary numerical values.

obl-ong/panel
obl-ong/panel
Multi-tenant domain services built with Ruby on Rails, open source and forever free. Powering the obl.ong domain registry.
GitHubGitHub
24