GHSA-v664-wmf2-px79MediumCVSS 7.3

A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function...

Published
November 5, 2026
Last Modified
November 5, 2026

🔗 CVE IDs covered (1)

📋 Description

A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingAccountCheck of the file /api/v1/auth/existing-account-check of the component Social Login Flow. Such manipulation of the argument user_response leads to authorization bypass. The attack may be launched remotely. The exploit is publicly available and might be used.

🔗 References (7)