Beveiligingsadvies

CVE-2026-30959

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-10 17:06:33
Laatst bijgewerkt 2026-03-10 17:59:05
Toegewezen door GitHub_M
CVSS-score 5.3
Status PUBLISHED

Beschrijving

OneUptime is a solution for monitoring and managing online services. The resend-verification-code endpoint allows any authenticated user to trigger a verification code resend for any UserWhatsApp record by ID. Ownership is not validated (unlike the verify endpoint). This affects the UserWhatsAppAPI.ts endpoint and the UserWhatsAppService.ts service.