About Time Technologies Herowatch Go Server authorization issue vulnerability

The Herowatch Go Server by About Time Technologies contains an authorization issue vulnerability stemming from unsafe direct object references. Authenticated remote attackers can exploit this flaw by modifying certain parameters to access or manipulate data and features belonging to other users...

ThinkGEM JeeSite authorization issue vulnerability

Versions 5.11.0 through 5.19.1 of thinkgem JeeSite contain an authorization issue vulnerability. This vulnerability stems from unsafe direct object references within the AI CMS chat module. Due to the absence of proper ownership checks and reversal mechanisms, authenticated attackers can utilize...

YunaiV yudao-cloud authorization issue vulnerability

Versions 2026.09 and earlier of YunaiV yudao-cloud contain an authorization issue vulnerability. This vulnerability stems from unsafe direct object references within the mall trade module. Authentication members can exploit this by providing any valid afterSaleId value and enumerating subsequent...

ONE ARMY authorization issue vulnerability

Versions prior to ONE ARMY 2.165.2 contain an authorization issue vulnerability. This vulnerability stems from unsafe direct object references; authenticated users can mark notifications from other users as read via POST /api/notifications/:id/read. Attackers can then iterate through consecutive...

CervantesSec Cervantes authorization issue vulnerability

Versions 0.3 through 1.3-beta of CervantesSec contain an authorization issue vulnerability. This vulnerability stems from unsafe direct object references; authenticated attackers can access sensitive findings, concept validation details, credentials, and customer information that do not belong to...

Modoboa authorization issue vulnerability

Versions of Modoboa prior to 2.8.0 contained an authorization issue vulnerability. This vulnerability stemmed from insecure direct object references. Certified users can delete alarms from other domains using the POST /api/v2/alarms/bulkdelete/ endpoint. Attackers can enumerate sequential alarm I...

Modoboa authorization issue vulnerability

Versions of Modoboa prior to 2.8.0 contained an authorization issue vulnerability. This vulnerability stemmed from insecure direct object references. Certified users could create automatic reply messages for any email address by providing the mbox value of another user. Attackers could also send...

Grafana Enterprise: Permissions, licensing, and access control issues

Grafana Enterprise versions 11.6.0 to 12.3.11, 12.4.13, and 12.4.x prior to version 12.4.13, 13.0.11 prior to version 13.0.x, 13.1.8 prior to version 13.1.x, and 13.2.4 prior to version 13.2.x have security vulnerabilities. These vulnerabilities stem from insecure direct object references in the...

Coze-Dev and Coze-Studio: Authorization issue vulnerabilities

In versions of coze-dev and coze-studio prior to 0.5.1, there is an authorization issue vulnerability. This vulnerability stems from insecure direct object references in the workflow.go file. It allows authenticated users to access workflows in other spaces by providing the workflow ID of that...

Krayin Laravel-CRM authorization issue vulnerability

The Krayin Laravel-CRM versions prior to 2.2.7 have a vulnerability related to authorization. This vulnerability stems from insecure direct object references in the QuoteController, along with improper execution of data range checks for each user. As a result, authenticated users with limited...

WordPress Tutor LMS Authorization Issue Vulnerability

WordPress Tutor LMS versions 4.1.0 and earlier have an authorization issue vulnerability. This vulnerability stems from Input::sanitizearray, which does not remove the POST keys provided by attackers including IDs, resulting in a lack of validation for user-controlled keys. This leads to insecure...

Hui Ge Open Source Charging Station Platform HUIZHI-ChargeOS-cloud: Authorization Issues and Vulnerabilities

The HUIZHI-ChargeOS-cloud 3.0.9 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the fact that the hcp-mp MeController and OrderController trust the userId, openId, and orderNumber parameters provided by clients. There are insecure direct object...

Guchengwuyue YSHOP Image CRM Authorization Issues and Vulnerabilities

GuChengWuyue YSHOP Image CRM 2.1.3 and earlier versions have an authorization issue vulnerability. This vulnerability stems from insecure direct object references. Certified sales users can access other users’ customer records by providing arbitrary IDs. It is possible to enumerate IDs, read...

Data-Infra Cube-Studio authorization issue vulnerability

The data-infra cube-studio versions from 2026.09.01 and earlier have an authorization issue vulnerability. This vulnerability stems from insecure direct object references. Certified users can use IDs to stop, reset, clear, or redeploy other users’ Notebooks and services. An attacker can send...

The Devlive Software Foundation DataCap has an authorization issue vulnerability

The Devlive Software Foundation DataCap versions 2025.1.1 and earlier have an authorization issue vulnerability. This vulnerability stems from insecure direct object references in the BaseController.getInfoForPath method. Low-privilege attackers can enumerate the auto-incrementing IDs of source...

Vastxie 99AI Authorization Issue Vulnerability

Vastxie 99AI versions 4.3.0 and earlier have an authorization issue vulnerability. This vulnerability stems from the lack of an owner check in querySingleChat, allowing for insecure direct object references. Unauthorized attackers can send fingerprint headers to obtain guest JWTs and traverse...

Number Sea Wen Zhou Visual Drag-and-Drop Big Data Integration Platform Backend Authorization Vulnerability

The Noshai Wenzhou Visual Drag-and-Drop Big Data Integration Platform has an authorization issue in its backend. This vulnerability stems from insecure direct object references. Members of the workspace who are authenticated can access data sources in other workspaces by sending an external...

BuildAdmin authorization issue vulnerability

BuildAdmin versions 2.3.9 and earlier have an authorization issue vulnerability. This vulnerability stems from insecure direct object references. Verified backend administrators can modify other administrators’ profiles using the id parameter. Attackers with the routine/adminInfo/edit permission...

Jeequan Jeepay authorization issue vulnerability

Jeequan Jepay versions 3.2.9 and earlier have an authorization issue vulnerability. This vulnerability stems from insecure direct object references. Attackers can override the payment channel configurations of other merchants by providing the victim’s infoId to...

LingGuoAI LingGuo short drama authorization issue vulnerabilities

LingGuoAI short dramas have an authorization issue. This issue stems from the lack of an owner check in the projects.Get method, resulting in a vulnerability involving insecure direct object references. Attackers can traverse digital IDs using GET, PUT, and DELETE /admin/v1/projects/:id, allowing...