Descrição
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The endpoint is public on purpose and the invitation code is the credential. This is the standalone SDK onboarding path for mobile apps that have no backend of their own: a developer generates a code via the authenticated dashboard endpoint, the user types it into the app, and it-s redeemed for SDK-scoped tokens.
CVSS 7.3EPSS 0.40499999999999997%Risco 0.76
Ver fonte- Publicação
- 2026-08-24 00:16:47
- Versões afetadas
- <=0.6.2
- Tipo
- Aplicação web
- Última alteração
- 2026-08-25 09:17:35
- Vetor
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L