CVE-2024-56799 — Simofa Allows Unauthenticated Access to API Routes
Simofa is a tool to help automate static website building and deployment. Prior to version 0.2.7, due to a design mistake in the RouteLoader class, some API routes may be public…
Published: 2024-12-30 · CVSS: 10.0 · CVSS 3.1
Simofa is a tool to help automate static website building and deployment. Prior to version 0.2.7, due to a design mistake in the RouteLoader class, some API routes may be publicly accessible when they should require authentication. This vulnerability has been patched in v0.2.7.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7