CyberRota Analysis
AI-GeneratedA vulnerability exists in the Public Invitation-Code Redemption Endpoint of the momentum open-wearables up to version 0.6.2, where improper handling of the invitation code argument results in missing authentication. This flaw allows for potential remote exploitation, enabling unauthorized access to user invitation functionalities. Organizations using this software should prioritize patching or mitigating this vulnerability to prevent unauthorized access.
Original NVD Description
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The endpoint is public on purpose and the invitation code is the credential. This is the standalone SDK onboarding path for mobile apps that have no backend of their own: a developer generates a code via the authenticated dashboard endpoint, the user types it into the app, and it's redeemed for SDK-scoped tokens.