Threats tagged 'ghsa-p7mm-hwh2-5wx4'

Kotaemon version 0.11.0 stores user passwords in plaintext within the client's localStorage, exposing sensitive credentials to potential unauthorized access. This vulnerability allows remote attackers to obtain passwords without authentication or user interaction.