Skip to content
This repository has been archived by the owner on Jun 29, 2023. It is now read-only.

D3VICE service patches and updates are not validated #27

Open
insanity54 opened this issue Feb 19, 2019 · 0 comments
Open

D3VICE service patches and updates are not validated #27

insanity54 opened this issue Feb 19, 2019 · 0 comments
Assignees
@insanity54
Labels
enhancement security

Comments

@insanity54
Copy link
Contributor

A potential cheating exploit is using Feathersjs service.patch to modify d3vices unfairly. There is no hook on patch or update which means the d3vice properties can be modified to any value
@insanity54 insanity54 self-assigned this Feb 19, 2019
@insanity54 insanity54 changed the title D3VICE patches are not validated D3VICE service patches and updates are not validated Feb 19, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@insanity54 insanity54

Labels
enhancement security
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@insanity54