Threats tagged 'ghsa-v94r-v878-933x'

Zipline versions through 4.6.2 have an authorization bypass vulnerability allowing authenticated administrators to access superadmin secrets. The API endpoints GET /api/users and GET /api/users/:id do not enforce the canInteract check, enabling attackers to retrieve plaintext totpSecret and OAuth tokens. This can allow bypassing two-factor authentication and takeover of superadmin accounts. Additionally, any authenticated user can enumerate other users' folders via GET /api/user/folders.