CyberRota Analysis
AI-GeneratedAn improper authorization vulnerability in fosrl/pangolin versions up to 1.20.0 allows authenticated remote attackers to misuse access tokens, enabling them to gain unauthorized access to resources across different organizations. This critical flaw arises from the failure to validate the target resource ID when verifying access tokens, potentially compromising sensitive data and operations. Organizations using this software should prioritize immediate remediation to prevent unauthorized access and protect their resources.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An improper authorization vulnerability in fosrl/pangolin through v1.20.0 allows an authenticated remote attacker to authenticate to any resource in any organization by reusing an access token issued for a different resource.