tsc-web-client vulnerabilities
2 known vulnerabilities in tsc-web-client from The-Scratch-Channel. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.9average CVSS score
Latest first
- 7.2 High severity
tsc-web-client: Missing Authorization
The Scratch Channel is a news website. If the user makes a fork, they can change the admins and make an article. Since the API uses a POST request, it will make an article. This issue is fixed in v1.2.
- 8.7 High severity
The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint…
The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint used to publish articles, can be used to post an article in any category with any date, regardless of who's logged in. This issue has been patched in version 1.2.