| शीर्षक | Papra HQ Papra 0.5.0 Improper Authentication |
|---|
| विवरण | The Papra application contains a broken authentication vulnerability where API key expiration is not enforced during the authentication process. Although API keys include an expiresAt field intended to limit their validity, the system retrieves keys based solely on their hash and does not verify whether the key has expired, either in the database query or within the authentication middleware. As a result, expired API keys remain valid indefinitely and can continue to be used for authenticated requests, allowing persistent unauthorized access and undermining credential lifecycle security controls. |
|---|
| स्रोत | ⚠️ https://github.com/lakshayyverma/CVE-Discovery/blob/main/Para2.md |
|---|
| उपयोगकर्ता | lakshay12311 (UID 91298) |
|---|
| सबमिशन | 27/03/2026 11:28 AM (7 महीनों पहले) |
|---|
| संयम | 19/04/2026 07:25 AM (23 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 355798 [papra-hq papra तक 26.3.x कमजोर प्रमाणीकरण] |
|---|
| अंक | 0 |
|---|