Threats tagged 'ghsa-x7jv-2m23-2ch3'

An improper access control vulnerability in x-ui version 0.3.2 allows any authenticated panel user to modify the xray configuration template via the settings interface. This action triggers a panel restart that causes the xray management gRPC service, normally bound to the loopback interface, to be rebound to non-loopback addresses. This change expands the management interface's exposure beyond its intended local-only access.