Threats tagged 'ghsa-j2j9-p9pw-2ffw'

A vulnerability exists in AIP-PUB ACPs-community up to version 2.2.0 in the send_verification_code function of the verify-code endpoint. Manipulating the phone argument can lead to improper authentication. The issue can be exploited remotely. Public exploit code is available. The fix status is unclear as no patch or commit has been identified.