Skip to content

API usage does not require key/token #21

@d313te

Description

@d313te

Hi,

It is possible to use all API endpoints without authentication. An attacker could add/change/delete servers and sites. The following example adds a new server without usage of any API key/token:

Screenshot 2024-11-05 210313

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions