CVE-2019-16281

Ptarmigan before 0.2.3 lacks API token validation, e.g., an "if (token === apiToken) {return true;} return false;" code block

published December 30, 2020

CVSS
—
EPSS
1%
Percentile
69.7
In the wild
Unconfirmed
What it is

Ptarmigan before 0.2.3 lacks API token validation, e.g., an "if (token === apiToken) {return true;} return false;" code block.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01277 · 69.7th percentile
Published
2020-12-30T20:12Z
EPSS history
Timeline
  • 30 DEC 20:12Z
    Ptarmigan before 0.2.3 lacks API token validation, e.g., an "if (token === apiToken) {return true;} return false;" code block
    cvelistv5