A better-auth flaw lets attackers create API keys for arbitrary users, risking account takeover and MFA bypass.
The post better-auth Flaw Allows Unauthenticated API Key Creation appeared first on eSecurity Planet.
Read the original article:
A better-auth flaw lets attackers create API keys for arbitrary users, risking account takeover and MFA bypass.
The post better-auth Flaw Allows Unauthenticated API Key Creation appeared first on eSecurity Planet.
Read the original article: