Security Vulnerabilities in Bludit - Please get in touch

[anpfeff]

Dear @dignajar,

I would like to kindly ask you to get in touch with me regarding the security vulnerabilities I reported to you on 2024-01-24 via email. In addition, I suggest that a security.md file is created in this repository in order to simplify the process of reporting Bludit vulnerabilities.

I am always happy to help if you need advice for implementing the security fixes.

Best,
Andreas

[dignajar]

Do security vulnerabilities explode without a user being created, or do you always need an admin or a user to exploit them?

[anpfeff]

Hi @dignajar, what is the current status of the fixes for the security vulnerabilities I disclosed on 2024-01-24 via email.

If you need further information or if I should help you with the fixes, please get in touch with me (preferably as a reply to my initial email).