Excessive Attack Surface
CWE-1125
The product has an attack surface whose quantitative measurement exceeds a desirable maximum.
We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 8.8.
Latest Excessive Attack Surface vulnerabilities
- 8.8 High severity
lunary-ai/lunary: Excessive Attack Surface
In lunary-ai/lunary version 1.2.2, an account hijacking vulnerability exists due to a password reset token leak. A user with a 'viewer' role can exploit this vulnerability to hijack another user's account by obtaining the password reset token. The vulnerabilit