Crosswatch
Monthly
Unauthenticated information disclosure in CrossWatch prior to v0.9.21 allows any network-accessible attacker to enumerate active session metadata via GET /api/app-auth/status, including originating IP addresses, User-Agent strings, internal session IDs, and creation/expiry timestamps. All CrossWatch deployments running versions before 0.9.21 with a network-accessible API are affected. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, though exploitation requires only a standard HTTP client with no credentials.
Unauthenticated information disclosure in CrossWatch prior to v0.9.21 allows any network-accessible attacker to enumerate active session metadata via GET /api/app-auth/status, including originating IP addresses, User-Agent strings, internal session IDs, and creation/expiry timestamps. All CrossWatch deployments running versions before 0.9.21 with a network-accessible API are affected. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, though exploitation requires only a standard HTTP client with no credentials.