If you learned from my posts, inspired, or encouraged to grow in the cybersecurity and digital forensics, I would really appreciate your vote and support - Husam Shbib!
MyCyberNews

Search

Find merged stories by title or summary.

Vulnerabilities & Patches
Emerging1 src

Issue 199: Vulnerability in Zulip server, broken access controls threat to APIs, introduction to BOLA

This week, we have news of a API vulnerability allowing privilege escalation in the team chat tool Zulip. We also have articles from PortSwigger on the threat of broken access controls and injection attacks to APIs, as well as a quick read on Broken Object Level Authorization vulnerabilities. Finally, we feature a guide from the Cloud Security Alliance on API security best practices. Vulnerability: Privilege escalation vulnerability in Zulip Server Security researchers have revealed details of a critical privilege escalation vulnerability in the API of Zulip Server. The vulnerability is tracked as CVE-2022-31168 and affects all versions of Zulip Server up to 5. 4. Users are recommended to upgrade to version 5. 5 immediately. The researchers discovered that it was possible to craft an API call that grants organization administrator privileges to one of their bots.

·API Security News
Read →

You've reached the end of current stories for this search.