QueryWeaver vulnerabilities
1 known vulnerability in QueryWeaver from FalkorDB. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score
Latest first
- 8.2 High severity
QueryWeaver: Incorrect Authorization
QueryWeaver contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid session tokens for existing accounts by submitting a signup request with a known victim email address. The signup route unconditionally creates an