CyberRota Analysis
AI-GeneratedA vulnerability exists in the waooAI library versions up to 0.4.1, specifically in the Internal Task Header Handler functions, which allows for improper authentication due to manipulation of the x-internal-user-id argument. This weakness could be exploited remotely, potentially leading to unauthorized access. Organizations using this library should prioritize addressing this vulnerability, especially those handling sensitive data or requiring strict access controls.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in waooAI waoowaoo up to 0.4.1. Affected by this vulnerability is the function getInternalTaskSession/getAuthSession/requireUserAuth/requireProjectAuth/requireProjectAuthLight in the library src/lib/api-auth.ts of the component Internal Task Header Handler. This manipulation of the argument x-internal-user-id request causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.