News · via CERT/CC
VU#166125: Bisheng has authentication bypass vulnerabilities
Overview Bisheng contains three vulnerabilities: a pre-authentication account takeover mechanism via a legacy single sign-on (SSO) endpoint; an Insecure Direct Object Reference (IDOR) vulnerability…