CyberRota Analysis
AI-GeneratedEch0 versions prior to 4.7.3 are vulnerable to an authentication bypass in the PUT /api/echo/like/:id endpoint, allowing unauthenticated attackers to manipulate engagement metrics by incrementing the fav_count field without verification. This exploitation can lead to the distortion of social ranking systems and engagement integrity. Organizations utilizing Ech0 should prioritize patching this vulnerability to safeguard their metrics and maintain trust in their platforms.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Ech0 before 4.7.3 contains an authentication bypass vulnerability in the PUT /api/echo/like/:id endpoint that allows unauthenticated attackers to increment engagement metrics without identity verification or rate limiting. Attackers can send repeated requests to arbitrarily inflate the fav_count field for any known echo identifier, compromising the integrity of engagement metrics and social ranking systems.