OpenBullet2 <= 0.3.2 - Authentication Bypass
OpenBullet2 <= 0.3.2 contains an authentication bypass caused by improper API key authentication middleware handling empty X-Api-Key header, letting unauthenticated attackers gain admin access, exploit requires sending empty X-Api-Key header.
PoC 已收录OpenBullet2
CVSS—EPSS 2.7%