Grafana OSS 安全漏洞

Grafana OSS is a visual dashboard in Grafana open source. A security vulnerability exists in Grafana OSS that stems from an access control issue in the DELETE /api/org/users/ endpoint that could cause an organization administrator to permanently delete the server administrator account...

CVE-2025-30368: Authorization Bypass Through User-Controlled SQL Primary Key

Zulip is an open-source team collaboration tool. The API for deleting an organization export is supposed to be restricted to organization administrators, but its handler failed to check that the field belongs to the same organization as the user. Therefore, an administrator of any organization wa...

CVE-2016-4475: Undefined Security Weakness

The 1 Organization and 2 Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3 allow remote authenticated users to bypass organization and location restrictions and a read, b edit, or c delete arbitrary organizations or locations via unspecified vectors...