firefighter-incident vulnerabilities
1 known vulnerability in firefighter-incident from ManoManoTech. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.9average CVSS score
Latest first
- 9.9 Critical severity
firefighter-incident: Missing Authentication for Critical Functionality
FireFighter is an incident management application. Prior to 0.0.54, the POST /api/v2/firefighter/raid/jira_bot endpoint (CreateJiraBotView) is reachable without authentication (permission_classes = [permissions.AllowAny]). Its attachments payload is fetched se