Description (CNA)
OneUptime is a solution for monitoring and managing online services. The resend-verification-code endpoint allows any authenticated user to trigger a verification code resend for any UserWhatsApp record by ID. Ownership is not validated (unlike the verify endpoint). This affects the UserWhatsAppAPI.ts endpoint and the UserWhatsAppService.ts service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OneUptime / oneuptime | affected < 10.0.21 |
CWE
CWE-285, CWE-307, CWE-639, CWE-862
References
- https://github.com/OneUptime/oneuptime/security/advisories/GHSA-cw6x-mw64-q6pv
- https://github.com/OneUptime/oneuptime/releases/tag/10.0.21
ADP enrichment
No English description supplied.