Vulnerabilities > CVE-2023-46754 - Incorrect Authorization vulnerability in Obl.Ong Admin 1.0.0/1.1.0/1.1.1
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
LOW Availability impact
NONE Summary
The admin panel for Obl.ong before 1.1.2 allows authorization bypass because the email OTP feature accepts arbitrary numerical values.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 4 |