| Package | Affected versions | Patched versions |
|---|---|---|
| obs-server | < 1.7.7 | 1.7.7 |
obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api implementation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free