CVE-2026-111614

DataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticated users to read other users' datasources, snippets and dashboards by numeric id. Low-privileged attackers can enumerate auto-increment ids on the source,...

EUVD-2026-103036

DataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticated users to read other users' datasources, snippets and dashboards by numeric id. Low-privileged attackers can enumerate auto-increment ids on the source,...

CVE-2026-111614

DataCap versions through 2025.1.1 are susceptible to an Insecure Direct Object Reference (IDOR) vulnerability within the BaseController.getInfoForPath method. This flaw allows authenticated users to access other users' datasources, snippets, and dashboards by providing a numeric ID. A low-privile...

PT-2026-116013

DataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticated users to read other users' datasources, snippets and dashboards by numeric id. Low-privileged attackers can enumerate auto-increment ids on the source,...