Scratch-Coding-Hut Website Authentication Vulnerability Allowing Account Takeover

An authentication vulnerability has been identified on the Scratch-Coding-Hut.github.io website, which is associated with Coding Hut. The issue arises from a sign-in form that requests Scratch usernames and passwords. This implementation creates a scenario where any user can potentially access another user's account. As of now, no fix has been released, but development of a patch is in progress. In the meantime, users are advised to refrain from signing in.

Impact

Exploitation of this vulnerability allows for unauthorized access to user accounts, enabling an attacker to impersonate the user and potentially access sensitive information or perform actions on their behalf.