Threats tagged 'ghsa-v554-w28r-wj53'

sysPass versions 3.0.1 through 3.2.11 have an authentication bypass vulnerability that allows unauthenticated attackers to reinstall the application by sending a POST request to the install handler. This bypass occurs because the install handler does not verify if the application is already installed. Exploitation enables attackers to overwrite configuration files, redirect the application to an attacker-controlled database, create administrator accounts, and execute arbitrary commands via crafted serialized gadget chains.