Threats tagged 'ghsa-8rw7-67fx-hqj4'

A vulnerability in Umami up to version 3.4.1 allows remote attackers to bypass authorization via manipulation of the Website argument in the Record API Endpoint. The flaw affects an unknown function in src/app/api/record/route.ts. Public exploit details have been disclosed, but the vendor has not responded or issued a fix. The vulnerability has a CVSS 3.1 base score of 6.5, indicating medium severity.