6 matches found
CVE-2026-87857
Temporal Server does not bind a workflow-history pagination token to the namespace and workflow named in the request that presents it. GetWorkflowExecutionHistory and GetWorkflowExecutionHistoryReverse authorize the caller against the namespace in the request, then select history from the branch...
CVE-2026-87857 Temporal Server workflow-history pagination token is not bound to the requested namespace and workflow
Temporal Server does not bind a workflow-history pagination token to the namespace and workflow named in the request that presents it. GetWorkflowExecutionHistory and GetWorkflowExecutionHistoryReverse authorize the caller against the namespace in the request, then select history from the branch...
EUVD-2026-120396
Temporal Server does not bind a workflow-history pagination token to the namespace and workflow named in the request that presents it. GetWorkflowExecutionHistory and GetWorkflowExecutionHistoryReverse authorize the caller against the namespace in the request, then select history from the branch...
CVE-2026-87857
The Temporal Server is vulnerable to an authorization bypass because it fails to bind a workflow-history pagination token to the specific namespace and workflow requested. The GetWorkflowExecutionHistory and GetWorkflowExecutionHistoryReverse functions authorize a caller against the requested nam...
PT-2026-141102
Temporal Server does not bind a workflow-history pagination token to the namespace and workflow named in the request that presents it. GetWorkflowExecutionHistory and GetWorkflowExecutionHistoryReverse authorize the caller against the namespace in the request, then select history from the branch...
CVE-2026-87857: Temporal Technologies, Inc. Temporal Server: Temporal Server does not bind a workflow-history pagination token to the namespace and workflow named in the request…
Temporal Server does not bind a workflow-history pagination token to the namespace and workflow named in the request that presents it. GetWorkflowExecutionHistory and GetWorkflowExecutionHistoryReverse authorize the caller against the namespace in the request, then select history from the branch...