vantage6 vulnerabilities (PyPI)
20 vulnerabilities.
-
vantage6PyPI vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review 7.1 High -
vantage6PyPI vantage6 node has an Improper Access Control issue 6.9 Medium -
vantage6PyPI Vantage6: Set admin user and password from environment or configuration 6.9 Medium -
vantage6PyPI Vantage6: 2FA can be circumvented with hacked email access 5.9 Medium -
vantage6PyPI Vantage6: No limit on emails sent for password/MFA reset 2.1 Low -
vantage6PyPI vantage6 lacks brute-force protection on change password functionality 1.7 Low -
vantage6PyPI vantage6 collaboration admins can extend their influence by expanding the collaboration 2.7 Low -
vantage6PyPI CORS settings overly permissive in vantage6 4.2 Medium -
vantage6PyPI Username timing attack on recover password/MFA token in vantage6 5.3 Medium -
vantage6PyPI vantage6 unencrypted task can be created in encrypted collaboration 3.5 Low -
vantage6PyPI vantage6 username timing attack 3.7 Low -
vantage6PyPI vantage6 insecure SSH configuration for node and server containers 6.5 Medium -
vantage6PyPI Remote code execution 8.8 High -
vantage6PyPI vantage6 Improper Access Control vulnerability 5.4 Medium -
vantage6PyPI Deleting a collaboration should also delete linked resources 3.7 Low -
vantage6PyPI Defining resource name as integer in vantage6 may give unintended access 5.4 Medium -
vantage6PyPI vantage6's Pickle serialization is insecure 5.5 Medium -
vantage6PyPI Refresh tokens do not expire in Vantage6 8.8 High -
vantage6PyPI Improper Preservation of Permissions in vantage6 6.3 Medium -
vantage6PyPI Observable Response Discrepancy in vantage6 5.3 Medium