🚨 Potential Improper Access Control about ultroid HOT 14 CLOSED

Did anyone connect our organization there? Or are you some random shit?

from ultroid.

We Will Be Fixing this issue soon

from ultroid.

Azure/ms-rest-nodeauth#117
I assumed the link would be private because it's a security vulnerability but I checked and it's marked as invalid, sorry

from ultroid.

Hi @sppidy,

Thanks for the confirmation. So I assume this advisory is valid?

from ultroid.

We Have Fixed This on Dev Branch We will be Pushing to Main brach As Soon as Possible

bf55cfb

from ultroid.

📦 A patch has been submitted for this report. 🔗 Check the patch (HEAD...sppidy:dev) or visit the advisory page (https://huntr.dev/bounties/1-other-TeamUltroid/Ultroid) for more information.

from ultroid.

📦 A patch has been submitted for this report. 🔗 Check the patch (HEAD...sppidy:dev) or visit the advisory page (https://huntr.dev/bounties/1-other-TeamUltroid/Ultroid) for more information.

from ultroid.

Hi @sppidy,

Thanks for the confirmation. So I assume this advisory is valid?

Yes.

from ultroid.

@sppidy - I can see this was marked as invalid, shall I go ahead and update it to valid?

from ultroid.

@novik8989 We Have Fixed the Issue in dev branch We Will be merging this to main branch ASAP

from ultroid.

@sppidy - I can see this was marked as invalid, shall I go ahead and update it to valid?

Yeah Sure

from ultroid.

📦 A patch has been submitted for this report. 🔗 Check the patch (HEAD...sppidy:dev) or visit the advisory page (https://huntr.dev/bounties/1-other-TeamUltroid/Ultroid) for more information.

from ultroid.

@sppidy - if @xditya now confirms the patch commit SHA for the fix on the advisory page, and selects you as the fixer, you will get the bounty for the fix, just a heads up!

Cheers 🎉

from ultroid.

📦 A patch has been submitted for this report. 🔗 Check the patch (HEAD...sppidy:dev) or visit the advisory page (https://huntr.dev/bounties/1-other-TeamUltroid/Ultroid) for more information.

from ultroid.