Lif-Platforms vulnerabilities
We track 3 vulnerabilities in Lif-Platforms products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 4, 2024.
Latest Lif-Platforms vulnerabilities
- 8.1 High severity
Lif-Auth-Server: Missing Authorization
Lif Authentication Server is a server used by Lif to do various tasks regarding Lif accounts. This vulnerability has to do with the account recovery system where there does not appear to be a check to make sure the user has been sent the recovery email and ent
- 7.1 High severity
New-Ringer-Server: Missing Authorization
Ringer server is the server code for the Ringer messaging app. Prior to version 1.3.1, there is an issue with the messages loading route where Ringer Server does not check to ensure that the user loading the conversation is actually a member of that conversati
- 7.5 High severity
Lif-Auth-Server: Improper Limitation of a Pathname to a Restricted Directory
Lif Auth Server is a server for validating logins, managing information, and account recovery for Lif Accounts. The issue relates to the `get_pfp` and `get_banner` routes on Auth Server. The issue is that there is no check to ensure that the file that Auth Ser