V12 Found Two High-Impact Vulnerabilities in LNbits
An authentication-cache bypass gave scoped API tokens wallet-admin access, and PayPal payments were credited before capture. Both are fixed in LNbits v1.6.0.
Posts
Seokchan Yoon, V12
An authentication-cache bypass gave scoped API tokens wallet-admin access, and PayPal payments were credited before capture. Both are fixed in LNbits v1.6.0.