Posted by Ron E on Sep 03 Description

Flextype CMS v1.0.0-alpha.3 contains an authentication validation

vulnerability in the API request-processing functionality. API endpoints

may declare access_token as a required parameter, but the

required-parameter validation only verifies that the corresponding key

exists in the supplied request data.

Authentication verification is subsequently performed inside an isset($data

['access_token']) condition. In PHP, isset()...