Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ActivityWatch vulnerable to DNS rebinding attack
Vulnerability Description
ActivityWatch open-source automated time tracker. Versions prior to 0.12.0b2 are vulnerable to DNS rebinding attacks. This vulnerability impacts everyone running ActivityWatch and gives the attacker full access to the ActivityWatch REST API. Users should upgrade to v0.12.0b2 or later to receive a patch. As a workaround, block DNS lookups that resolve to 127.0.0.1.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
使用欺骗进行的认证绕过
Vulnerability Title
ActivityWatch 安全漏洞
Vulnerability Description
ActivityWatch是ActivityWatch开源的一个免费和开源自动时间跟踪器。 ActivityWatch 0.12.0b2 之前的版本存在安全漏洞，该漏洞源于容易受到 DNS 重新绑定攻击，攻击者利用该漏洞可以
CVSS Information
N/A
Vulnerability Type
N/A