Lif-Auth-Server vulnerabilities

2 known vulnerabilities in Lif-Auth-Server from Lif-Platforms. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Lif-Auth-Server: Missing Authorization

  CVE-2024-47768Oct 4, 2024Lif-Platforms

  Lif Authentication Server is a server used by Lif to do various tasks regarding Lif accounts. This vulnerability has to do with the account recovery system where there does not appear to be a check to make sure the user has been sent the recovery email and ent

• 7.5 High severity

  Lif-Auth-Server: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-49801Jan 12, 2024Lif-Platforms

  Lif Auth Server is a server for validating logins, managing information, and account recovery for Lif Accounts. The issue relates to the `get_pfp` and `get_banner` routes on Auth Server. The issue is that there is no check to ensure that the file that Auth Ser