Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
getmaxun/maxun
develop @ 42f97de
29
Fixes
2
CVEs
HIGH
Peak severity
39.3%
Coverage
Highlights
Auth Bypass: 13 prior fixes. Scrutinize any change in this area.
server/src/routes/auth.ts: most-fixed (14 issues). Treat as high-risk during review.
19 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Numerous routes (including Google/Airtable OAuth callbacks and API key generation) were exposed without enforcing the requireSignIn middleware, allowing unauthenticated actions. Additionally, checks on 'req.user' were bypassed by evaluating uncasted requests or failing to handle undefined user contexts.
Broken Access Control: Endpoints querying user assets, such as Robot.findOne, lacked scope restrictions, permitting insecure direct object references (IDOR). Attackers could access or modify assets belonging to other users by manipulating target IDs because database queries were not restricted by the caller's session ID.
Information Disclosure: The application frequently leaked sensitive proxy passwords, credentials, and configuration parameters in application logs and API JSON responses. Remediation required stripping plain credentials, decrypting data prior to masking, and replacing raw objects with strict booleans.