Threats tagged 'ghsa-5fvm-xr9w-32vj'

Rote versions 1.2.0 through 2.6.0 have an authorization bypass vulnerability in the OAuth bind/merge endpoint. This flaw allows authenticated users to merge any OAuth-bound account into their own by submitting a public existingUserId along with a GitHub or Apple user ID. Exploitation enables attackers to take over victims' notes, attachments, API keys, and delete the victim's account.