6 matches found
GHSA-C5XX-H28H-F682 obsidian-tc : Symlink read-ACL scope bypass via lexical path checks
Impact ACL checks ran on the lexical vault-relative path while containment used the realpath. An in-vault symlink placed under an allowed glob, whose realpath resolved into a denied folder, passed the read ACL — an intra-vault read-ACL-scope bypass. It requires an out-of-band-planted symlink no M...
obsidian-tc : Symlink read-ACL scope bypass via lexical path checks
Impact ACL checks ran on the lexical vault-relative path while containment used the realpath. An in-vault symlink placed under an allowed glob, whose realpath resolved into a denied folder, passed the read ACL — an intra-vault read-ACL-scope bypass. It requires an out-of-band-planted symlink no M...
npm: obsidian-tc : Symlink read-ACL scope bypass via lexical path checks
npm: obsidian-tc : Symlink read-ACL scope bypass via lexical path checks vulnerability discovered by ? in WordPress npm obsidian-tc versions 1.3.1...
CVE-2026-90934 EspoCRM before 10.0.4 Field-level Security Bypass via Attendees
EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in the meeting and call attendees endpoints that allows authenticated users to read restricted email addresses. Attackers can recover hidden attendee emails by exploiting incorrect ACL scope validation that checks parent...
CVE-2026-90934 EspoCRM before 10.0.4 Field-level Security Bypass via Attendees
EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in the meeting and call attendees endpoints that allows authenticated users to read restricted email addresses. Attackers can recover hidden attendee emails by exploiting incorrect ACL scope validation that checks parent...
CVE-2026-90934: Incorrect Authorization
EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in the meeting and call attendees endpoints that allows authenticated users to read restricted email addresses. Attackers can recover hidden attendee emails by exploiting incorrect ACL scope validation that checks parent...