6 matches found
CVE-2026-125752
Meteroid before 2.2.0 contains a cross-tenant authorization bypass vulnerability in the CouponsService UpdateCouponStatus gRPC handler, whose UPDATE query filters only on coupon id and ignores tenant ID. Authenticated users with catalog:manage or a tenant-scoped API key can supply another tenant'...
EUVD-2026-121234
Meteroid before 2.2.0 contains a cross-tenant authorization bypass vulnerability in the CouponsService UpdateCouponStatus gRPC handler, whose UPDATE query filters only on coupon id and ignores tenant ID. Authenticated users with catalog:manage or a tenant-scoped API key can supply another tenant'...
CVE-2026-125752 Meteroid before 2.2.0 Cross-Tenant Authorization Bypass via UpdateCouponStatus
Meteroid before 2.2.0 contains a cross-tenant authorization bypass vulnerability in the CouponsService UpdateCouponStatus gRPC handler, whose UPDATE query filters only on coupon id and ignores tenant ID. Authenticated users with catalog:manage or a tenant-scoped API key can supply another tenant'...
CVE-2026-125752
Meteroid versions prior to 2.2.0 are vulnerable to a cross-tenant authorization bypass within the CouponsService UpdateCouponStatus gRPC handler. The underlying cause is that the UPDATE query filters exclusively on the coupon id while failing to validate the tenant ID . This allows authenticated ...
CVE-2026-125752: meteroid-oss Meteroid: Meteroid before 2.2.0 contains a cross-tenant authorization bypass vulnerability in the CouponsService…
Meteroid before 2.2.0 contains a cross-tenant authorization bypass vulnerability in the CouponsService UpdateCouponStatus gRPC handler, whose UPDATE query filters only on coupon id and ignores tenant ID. Authenticated users with catalog:manage or a tenant-scoped API key can supply another tenant'...
PT-2026-141748
Meteroid before 2.2.0 contains a cross-tenant authorization bypass vulnerability in the CouponsService UpdateCouponStatus gRPC handler, whose UPDATE query filters only on coupon id and ignores tenant ID. Authenticated users with catalog:manage or a tenant-scoped API key can supply another tenant'...