Lucene search
+L

4 matches found

Cvelist
Cvelist
•added 2026/10/21 5:17 p.m.•33 views

CVE-2026-92204 Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability

Airbyte OneDrive Connector getshareddriveobject Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability. T...

7.7CVSS0.00414EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/21 5:17 p.m.•78 views

CVE-2026-92204

The Airbyte OneDrive Connector is vulnerable to a Server-Side Request Forgery (SSRF) and Information Disclosure vulnerability in the _get_shared_drive_object method. The root cause is a lack of proper validation of a URI before the application accesses resources. This flaw allows an authenticated...

7.7CVSS7.2AI score0.00414EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/10/20 4:00 p.m.•8 views

Airbyte OneDrive Connector server request forgery vulnerability

Version 1.8 of Airbyte OneDrive Connector contains a server-side request forgery vulnerability. This vulnerability stems from the getshareddriveobject method failing to properly validate URIs prior to accessing resources; it may allow authenticated remote attackers to send arbitrary server reques...

7.7CVSS7.4AI score0.00414EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2026/09/16 12:00 a.m.•22 views

(0Day) Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability. The specific flaw exists within the getshareddriveobject method. The issue results from the lack of proper validati...

7.7CVSS7.2AI score0.00414EPSS
SaveExploits0
Rows per page
Query Builder