Threats tagged 'ghsa-pfxh-9349-4f24'

AmoyLab Unla versions up to 0.10.0 contain an authentication bypass vulnerability in the OAuth2 server. This flaw allows unauthenticated attackers to obtain valid access tokens because the resource owner is never authenticated. Attackers can exploit this by registering a client, requesting an authorization code, and exchanging it for a token to access protected resources and injected credentials.