| शीर्षक | Mirofish <= 60757b3 Improper Authentication |
|---|
| विवरण | MiroFish exposes all 60 backend API endpoints without any authentication or authorization mechanism. The Flask application binds to x.x.x.x:5001 by default and the official docker-compose.yml maps this port externally. Any remote user can invoke any API function including creating simulations, reading simulation data, accessing uploaded files, and triggering LLM inference, without supplying any credentials. There is no login endpoint, no session management, no token validation, and no middleware enforcing access control anywhere in the codebase. |
|---|
| स्रोत | ⚠️ https://github.com/666ghj/MiroFish |
|---|
| उपयोगकर्ता | Fergod (UID 55882) |
|---|
| सबमिशन | 02/08/2026 03:09 AM (2 महीनों पहले) |
|---|
| संयम | 25/09/2026 10:44 AM (2 months later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 359621 [666ghj MiroFish तक 0.1.2 REST API Endpoint backend/app/__init__.py create_app कमजोर प्रमाणीकरण] |
|---|
| अंक | 0 |
|---|