CVE-2026-71203 - changedetection.io's REST API resources are protected by an @auth.check_token decorator validating the caller's x-api-key header, except the Spec resource registered at /api/v1/full-spec (changedetectionio/api/Spec.py), whose get method carries neither @auth.check_token nor @validate_openapi_request. - 漏洞详情

漏洞编号：CVE-2026-71203

风险等级：中危

漏洞来源：CVE

CVE 编号：CVE-2026-71203

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-306

发布/更新时间：2026-08-05 / 2026-08-28

漏洞描述

changedetection.io's REST API resources are protected by an @auth.check_token decorator validating the caller's x-api-key header, except the Spec resource registered at /api/v1/full-spec (changedetectionio/api/Spec.py), whose get method carries neither @auth.check_token nor @validate_openapi_request.

漏洞描述

相关链接

相关漏洞