Filecoin-project Lotus vulnerabilities
- filecoin-project lotusLotus through 0.10.2 Authorization Bypass via switch_organization Endpoint7.6 High
- filecoin-project lotusLotus through 0.10.2 Improper Authentication via Event Ingestion API Key Prefix8.2 High
- filecoin-project lotusLotus through 0.10.2 SQL Injection via Subscription Filter Keys8.7 High
- filecoin-project lotusLotus through 0.10.2 SQL Injection via Metric Property Names and Filters8.7 High
- filecoin-project lotusLotus through 0.10.2 SQL Injection via Custom SQL Billable Metrics8.7 High
- filecoin-project lotusLotus through 0.10.2 Cross-Organization IDOR via SubscriptionViewSet6.0 Medium
- filecoin lotusBLS Signature "Malleability"5.9 Medium