Análise de Vulnerabilidades de API

On May 29, 2023, a critical security vulnerability, identified as CVE-2023-34362, was published. Learn the details of this vulnerability, its implications, and recommendations for users to mitigate the risk.

This post details issues identified in a popular framework used by many online services to implement OAuth (as well as other functionality). Salt Labs findings show that services using this framework are susceptible to credentials leakage.

Salt Security shares insights on the initial release candidate for the API Security Top 10 2023.

Dada a ampla utilização do OAuth, quaisquer vulnerabilidades encontradas nos seus componentes ou nas suas implementações podem levar a um impacto de segurança considerável nas aplicações e serviços que os utilizam.

We chose to investigate the services provided by LEGO, perhaps the most famous toy manufacturer in the world — because we contend this example sheds light on the reality of quick adoption of APIs and the risks that can come with that fast pace.

Insights regarding two new vulns that have been uncovered in the OpenSSL library — CVE-2022-3602 and CVE-2022-3786. These vulnerabilities affect OpenSSL.