| Package | Affected versions | Patched versions |
|---|---|---|
| vedo suite | = 2024.17 |
Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high privilege JWT token without prior authentication via sending an empty HTTP POST request to the /autologin/ API endpoint.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free