CVE-2023-28126

Publication date

2023-05-09 00:00:00

Family

hackerone

State

PUBLISHED

Description

An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiting the SetUser method or can exploit the Race Condition in the authentication message.