OliveTin vulnerabilities

OliveTin has Unvalidated `ot_`-prefixed Arguments that Bypass Input Filtering

OliveTin · OliveTin

OliveTin: StartActionAndWait Endpoints Bypass `logs` Permission and Return Action Output

OliveTin · OliveTin

OliveTin OS Command Injection via Custom regex: Argument Type Bypassing Shell Safety Check

OliveTin · OliveTin

OliveTin: Unauthenticated DoS via OAuth2 State Memory Exhaustion (Unbounded Map Growth)

OliveTin · OliveTin

OliveTin: ValidateArgumentType API Endpoint Missing Authentication Allows Action and Argument Enumeration

OliveTin · OliveTin

OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination

OliveTin · OliveTin

OliveTin Unauthorized Action Output Disclosure via EventStream

OliveTin · OliveTin

OliveTin's unsafe parsing of UniqueTrackingId can be used to write files

OliveTin · OliveTin

OliveTin: View permission not being checked when returning dashboards

OliveTin · OliveTin

OliveTin: RestartAction always runs actions as guest

OliveTin · OliveTin