Critical Xen Orchestra authentication bypass is being actively exploited

2 comments

• $Ellis_dev 4 hours ago

  An auth bypass from an empty-object login token sounds like someone checked if the token existed but never checked what was actually in it.

  [-]
  • $theGuyOnInterne 3 hours ago

    [dead]