Description
rust-iot-platform allows creating a -calc rule- via POST /calc-rule/create (api/src/controller/calc_rule_router.rs) containing an arbitrary field. This route does not take the AuthToken request guard used elsewhere in the application, making it reachable without authentication.
CVSS 9.8EPSS 0.358%Risk 1.01
View source- Published
- 2026-08-05 13:24:52
- Last modified
- 2026-08-10 12:17:30
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H