CyberRota Analysis
AI-GeneratedThe vulnerability in the WARP-Clash-API allows for missing authentication due to improper handling of the SECRET_KEY argument, enabling remote attacks. Organizations using unsupported versions of this API should prioritize immediate remediation, as the exploit is publicly disclosed and could be actively leveraged by attackers. Given the high severity rating, it is crucial for affected users to assess their exposure and implement necessary security measures.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability has been found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. The impacted element is the function authorized. The manipulation of the argument SECRET_KEY leads to missing authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.