OpenFlagr <= 1.1.18 - Authentication Bypass
OpenFlagr <= 1.1.18 contains an authentication bypass caused by improper path normalization handling in HTTP middleware whitelist logic, letting attackers access protected API endpoints without valid credentials, exploit requires crafted requests.
PoC 已收录OpenFlagr
CVSS9.3EPSS 1.5%