CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Authentication Bypass Using an Alternate Path or Channel vulnerability in Acnoo Acnoo Flutter API acnoo-flutter-api allows Authentication Bypass.This issue affects Acnoo Flutter API: from n/a through <= 1.0.5.
Explanation of Vulnerability in Simple Terms
Acnoo Flutter API versions 1.0.5 and earlier contain an authentication bypass vulnerability. An attacker can gain full access to the API without valid credentials, potentially reading, modifying, or deleting sensitive data. No user interaction or special privileges are required. Organizations using affected versions should update immediately.
What an attacker can do
Gain unauthorized access to the API and read, modify, or delete data without authentication.
Potential impact on your site
Attackers can access, modify, or delete all data exposed by the API without logging in.
Conditions required to exploit
Network access to the Acnoo Flutter API; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
