Wakapi
Monthly
Account takeover in Wakapi before 2.17.6 is possible because the user caching service resolves lookups in an unintended context, allowing one user's lookup to return another user's cached record; unauthenticated remote attackers can thereby hijack an existing account. The high attack complexity (AC:H) reflects that an attacker must induce or await the specific cache state in which lookups cross contexts, rather than sending a single deterministic request, and no public exploit has been identified at time of analysis. Vendor-released patch: 2.17.6.
Account takeover in Wakapi before 2.17.6 is possible because the user caching service resolves lookups in an unintended context, allowing one user's lookup to return another user's cached record; unauthenticated remote attackers can thereby hijack an existing account. The high attack complexity (AC:H) reflects that an attacker must induce or await the specific cache state in which lookups cross contexts, rather than sending a single deterministic request, and no public exploit has been identified at time of analysis. Vendor-released patch: 2.17.6.