Threats tagged 'ghsa-7cpc-qh93-pj89'

AiSOC versions from 12.1.0 up to but not including 23.3.0 have a missing authentication vulnerability. This flaw allows unauthenticated attackers to query the enrichment service via specific Next.js console rewrite routes, potentially retrieving threat intelligence data and consuming commercial API quota by setting a force parameter.