Unrated
XSS Hunter Express before 2021-09-17 does not properly enforce authentication requirements for paths.
CVE-2021-41317
First seen on SecPulse
References
- advisory docs.google.com
- advisory vuln.ryotak.me
- patch github.com