Threats tagged 'ghsa-45wf-gcw8-5mwr'

A vulnerability in Logseq versions 2.0.1 and 2.0.2 affects the validate-auth-token function in the Local HTTP API component, resulting in missing authentication. This flaw can be exploited remotely without privileges or user interaction. Public exploit code exists, but the vendor has not yet responded or issued a fix.