Lucene search
+L

430 matches found

OSV
OSV
added 2026/07/13 3:35 p.m.18 views

PYSEC-2026-2934 praisonai-platform: Any workspace member can delete the entire workspace via DELETE /workspaces/{id}

Summary Type: Authorization bypass enabling destructive action. The DELETE /workspaces/workspaceid endpoint is gated only by requireworkspacememberworkspaceid default minrole="member". Any member of the workspace can issue a single DELETE to wipe the entire workspace, including every project,...

8.1CVSS6.1AI score0.00525EPSS
SaveExploits0References5
Rows per page
Query Builder