CVE-2026-30959 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

OneUptime is a solution for monitoring and managing online services. The resend-verification-code endpoint allows any authenticated user to trigger a verificati…
Medium CVSS: 5.3

CVE-2026-30959

OneUptime is a solution for monitoring and managing online services. The resend-verification-code endpoint allows any authenticated user to trigger a verification code resend for any UserWhatsApp record by ID. Ownership is not validated (unlike the verify endpoint). This affects the UserWhatsAppAPI.ts endpoint and the UserWhatsAppService.ts service.
Vendor
Hackerbay
Product
Oneuptime
CWE
CWE-285
Yayın Tarihi
2026-03-10 18:18:55
Güncelleme
2026-03-12 14:01:15
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-285 Oneuptime MEDIUM Hackerbay 2026

Referanslar

https://github.com/OneUptime/oneuptime/releases/tag/10.0.21 https://github.com/OneUptime/oneuptime/security/advisories/GHSA-cw6x-mw64-q6pv https://github.com/OneUptime/oneuptime/security/advisories/GHSA-cw6x-mw64-q6pv