Threats tagged 'ghsa-rxpf-ghf8-22v2'

OpsTree REMS versions through 1.0.0 have a missing authentication vulnerability that permits unauthenticated remote attackers to access Governance API endpoints. Attackers can exploit this by sending requests without valid Authorization headers or with tampered JWT tokens, allowing them to retrieve sensitive database credentials such as hosts, usernames, and passwords.