Threats tagged 'ghsa-fh8f-pxvw-9f29'

AstronRPA versions up to 1.1.6 have an authentication bypass vulnerability in the OpenResty gateway's auth_handler.lua component. This flaw allows unauthenticated attackers to send arbitrary Bearer tokens without validation to specific API routes, enabling them to spoof user identity headers and act as any user. The vulnerability has a medium severity rating with a CVSS score of 6.9.