medium5.3
CVE-2023-46754
The admin panel for Obl.ong before 1.1.2 allows authorization bypass because the email OTP feature accepts arbitrary numerical values.
Impact
The admin panel for Obl.ong before 1.1.2 allows authorization bypass because the email OTP feature accepts arbitrary numerical values.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Obl.Ong | Admin | before 1.1.2 |