Beschreibung
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The endpoint is public on purpose and the invitation code is the credential. This is the standalone SDK onboarding path for mobile apps that have no backend of their own: a developer generates a code via the authenticated dashboard endpoint, the user types it into the app, and it-s redeemed for SDK-scoped tokens.
CVSS 7.3EPSS 0.40499999999999997%Risiko 0.76
Quelle öffnen- Veröffentlicht
- 2026-08-24 00:16:47
- Betroffene Versionen
- <=0.6.2
- Typ
- Webanwendung
- Zuletzt geändert
- 2026-08-25 09:17:35
- Vektor
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L