Advisories · Technology
Wei-Shaw sub2api.
Every CVE that names Wei-Shaw sub2api among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.5 High
Sub2API: Path traversal in the Responses subpath routes lets an authenticated tenant relay requests to arbitrary upstream endpoints using pooled account credentials
- Wei-Shaw sub2api
- Path traversal
- CWE-441
- CVSS 8.0 High
Sub2API Vulnerable to Password Reset Poisoning via Host Header Trust Issue, Leading to Account Takeover
- Wei-Shaw sub2api
- CWE-116