Research topic

Application Security

Web platforms, open-source libraries and their patches.

2025

Jul 29July
Application SecurityGrafana
How an incomplete patch left a dashboard account takeover open
An earlier fix closed one open redirect, but a second redirect and a client-side path traversal rebuilt the same account takeover chain.insominaOPSWAT Unit 5151 min readAccount takeoverCVE-2025-6023CVE-2025-6197

First Application Security publication · July 2025