Threats tagged 'ghsa-jq3v-2g6p-5vc4'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-63151Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows High8.72026-11-13GCVE DatabaseCVE-2026-63151 Omnispace Agora Project versions through 26.10.0 have a vulnerability in token generation where the md5Id token can be predicted due to a missing dateCrea value. This allows unauthenticated attackers to compute valid tokens and access private calendar events by exploiting the misc&action=DisplayIcal endpoint without authentication. Report on CVE-2026-63151 Vulnerability CWE-330 #ghsa-jq3v-2g6p-5vc4	GCVE Database	2026-11-13

Page 1 of 1