Authorization Bypass

2021-11-0506:16:17

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

155

hangfire

authorization bypass

remote access

server

EPSS

0.001

Percentile

49.4%

JSON

hangfire is vulnerable to authorization bypass. Remote attackers are able to gain access to hangfire dashboard from outside of the server because no authorization filters are being used by default.

References

github.com/HangfireIO/Hangfire/commit/9781bdbc95fcb87f182b166630a4b10373ad07ae

github.com/HangfireIO/Hangfire/issues/1958

github.com/HangfireIO/Hangfire/security/advisories/GHSA-7rq6-7gv8-c37h

EPSS

0.001

Percentile

49.4%

JSON

Related for VERACODE:32818