All issues

Search results

Client-side role/permission checks are bypassable by forging the cached user object (AES key in JS-readable localStorage)

Status: Open.

#16265 In SandeepVashishtha/Eventra;

· ionfwsrijan opened on Aug 13, 2026

new Function() executes arbitrary collaborator-supplied JavaScript in PairCodeEditor

Status: Open.

#16264 In SandeepVashishtha/Eventra;

· ionfwsrijan opened on Aug 13, 2026

Request-signing HMAC secret is embedded in the frontend bundle (VITE_REQUEST_SIGNING_SECRET) — signatures are meaningless

Status: Open.

#16263 In SandeepVashishtha/Eventra;

· ionfwsrijan opened on Aug 13, 2026

Offline check-in queue replay has no server-side idempotency — duplicate check-ins

Status: Open.

#16262 In SandeepVashishtha/Eventra;

· ionfwsrijan opened on Aug 13, 2026

Dynamic anti-screenshot ticket QR uses a keyless, non-cryptographic TOTP — trivially forgeable (and rejected by the official scanner)

Status: Open.

#16261 In SandeepVashishtha/Eventra;

· ionfwsrijan opened on Aug 13, 2026

QR check-in scanner never decodes a QR and never persists/validates check-ins server-side

Status: Open.

#16260 In SandeepVashishtha/Eventra;

· ionfwsrijan opened on Aug 13, 2026

Live Chat renders user messages via unsanitized dangerouslySetInnerHTML (stored/reflected XSS)

Status: Open.

#16259 In SandeepVashishtha/Eventra;

· ionfwsrijan opened on Aug 13, 2026

WebAuthnController /register-challenge is unauthenticated, open CORS *, and uses an unbounded in-memory challenge map

Status: Open.

#16258 In SandeepVashishtha/Eventra;

· ionfwsrijan opened on Aug 13, 2026

PushSubscriptionService stores attacker-controlled WebPush endpoint — SSRF when pushes are dispatched

Status: Open.

#16257 In SandeepVashishtha/Eventra;

· ionfwsrijan opened on Aug 13, 2026

PlagiarismController.exportCsvReport writes unescaped team names — CSV formula injection

Status: Open.

#16256 In SandeepVashishtha/Eventra;

· ionfwsrijan opened on Aug 13, 2026

EncryptedAnalyticsController: open CORS *, no authorization/scoping, client-supplied modulus, and unconditional homomorphicPropertyVerified

Status: Open.

#16255 In SandeepVashishtha/Eventra;

· ionfwsrijan opened on Aug 13, 2026

RateLimitingFilter trusts client-supplied X-Forwarded-For, allowing rate-limit bypass

Status: Open.

#16254 In SandeepVashishtha/Eventra;

· ionfwsrijan opened on Aug 13, 2026