Posts tagged with "authorization" | b4r

workspace asset download bypass in plane

CVE-2026-104960 in plane let any workspace member download private files from secret projects they do not belong to through the workspace-scoped asset endpoint

b b4r
October 12, 2026
3 min read

vulnerability cve authorization
cross-app builder privilege escalation in budibase

CVE-2026-82240 in budibase let an app-scoped builder grant builder access to unrelated apps through the public user API

b b4r
September 13, 2026
3 min read

vulnerability cve authorization
turning a scoped vikunja token into a normal session

cve-2026-57458 allowed a vikunja api token scoped only to oauth.authorize to mint normal oauth session credentials outside the original token permissions

b b4r
July 24, 2026
4 min read

vulnerability cve web exploitation authorization
breaking shopper checkout from settings

cve-2026-56826 let low-privileged shopper users with settings access delete tax, zone, shipping, and carrier configuration through missing authorization on Livewire actions

b b4r
July 2, 2026
5 min read

vulnerability cve web exploitation authorization
a delete bypass in misp through crudcomponent

cve-2026-10860 let a low-privileged galaxy editor delete another organisation galaxy in misp through a delete-path validation bypass

b b4r
June 21, 2026
3 min read

vulnerability cve web exploitation authorization
an event media authz bug in zoneminder

cve-2026-54258 let low-privileged zoneminder users fetch private event media from monitors they were not allowed to access

b b4r
June 13, 2026
3 min read

vulnerability cve web exploitation authorization
a second-order ddns authz bug in nezha

cve-2026-53521 let a stored future ddns profile id turn into another user ddns profile context later in nezha

b b4r
June 10, 2026
3 min read

vulnerability cve web exploitation authorization