Threats tagged 'ghsa-c5pp-m7xr-h39f'

A medium-severity authorization bypass vulnerability exists in iFlytek astron-agent up to version 1.1.2. The flaw affects the FileInfoV2Service.listKnowledgeByPage function via manipulation of the argument space-id, allowing unauthorized access. The vulnerability can be exploited remotely. Public exploit code is available, but no vendor response or patch has been provided.