GHSA-v664-wmf2-px79MediumCVSS 7.3
A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function...
🔗 CVE IDs covered (1)
📋 Description
A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingAccountCheck of the file /api/v1/auth/existing-account-check of the component Social Login Flow. Such manipulation of the argument user_response leads to authorization bypass. The attack may be launched remotely. The exploit is publicly available and might be used.