Description (CNA)
tinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by an unanchored regular expression.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| tinyauth / tinyauth | affected 0 before 5.1.3 |
CWE
CWE-777
References
ADP enrichment
No English description supplied.
No references supplied.