Threats tagged 'ghsa-qfmx-cr8f-4rw3'

Eclipse Mnestix Browser versions from 1.2.0 up to but excluding 2.3.0 contain a vulnerability that allows unauthenticated attackers to perform privileged actions. These actions include changing Infrastructure settings and invoking the connected authenticated Mnestix AAS Generator backend, which should only be accessible to authorized users.