Coze-Dev and Coze-Studio: Authorization issue vulnerabilities

In versions of coze-dev and coze-studio prior to 0.5.1, there is an authorization issue vulnerability. This vulnerability stems from insecure direct object references in the workflow.go file. It allows authenticated users to access workflows in other spaces by providing the workflow ID of that...

Modoboa authorization issue vulnerability

Versions of Modoboa prior to 2.8.0 contained an authorization issue vulnerability. This vulnerability stemmed from insecure direct object references. Certified users can delete alarms from other domains using the POST /api/v2/alarms/bulkdelete/ endpoint. Attackers can enumerate sequential alarm I...

Modoboa authorization issue vulnerability

Versions of Modoboa prior to 2.8.0 contained an authorization issue vulnerability. This vulnerability stemmed from insecure direct object references. Certified users could create automatic reply messages for any email address by providing the mbox value of another user. Attackers could also send...

Grafana Enterprise: Permissions, licensing, and access control issues

Grafana Enterprise versions 11.6.0 to 12.3.11, 12.4.13, and 12.4.x prior to version 12.4.13, 13.0.11 prior to version 13.0.x, 13.1.8 prior to version 13.1.x, and 13.2.4 prior to version 13.2.x have security vulnerabilities. These vulnerabilities stem from insecure direct object references in the...

Krayin Laravel-CRM authorization issue vulnerability

The Krayin Laravel-CRM versions prior to 2.2.7 have a vulnerability related to authorization. This vulnerability stems from insecure direct object references in the QuoteController, along with improper execution of data range checks for each user. As a result, authenticated users with limited...

WordPress Tutor LMS Authorization Issue Vulnerability

WordPress Tutor LMS versions 4.1.0 and earlier have an authorization issue vulnerability. This vulnerability stems from Input::sanitizearray, which does not remove the POST keys provided by attackers including IDs, resulting in a lack of validation for user-controlled keys. This leads to insecure...

Number Sea Wen Zhou Visual Drag-and-Drop Big Data Integration Platform Backend Authorization Vulnerability

The Noshai Wenzhou Visual Drag-and-Drop Big Data Integration Platform has an authorization issue in its backend. This vulnerability stems from insecure direct object references. Members of the workspace who are authenticated can access data sources in other workspaces by sending an external...

Hui Ge Open Source Charging Station Platform HUIZHI-ChargeOS-cloud: Authorization Issues and Vulnerabilities

The HUIZHI-ChargeOS-cloud 3.0.9 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the fact that the hcp-mp MeController and OrderController trust the userId, openId, and orderNumber parameters provided by clients. There are insecure direct object...

roncoo-education Authorization Issue Vulnerability

RonCoo roncoo-education versions 25.0.0-RELEASE and earlier have an authorization issue vulnerability. This vulnerability stems from insecure direct object references, which may allow authenticated users to call payment cancellation or continuation endpoints by providing other user’s order number...

The Devlive Software Foundation DataCap has an authorization issue vulnerability

The Devlive Software Foundation DataCap versions 2025.1.1 and earlier have an authorization issue vulnerability. This vulnerability stems from insecure direct object references in the BaseController.getInfoForPath method. Low-privilege attackers can enumerate the auto-incrementing IDs of source...

IoTSharp authorization issue vulnerability

IoTSharp 3.6.1 and earlier versions have an authorization issue vulnerability. This vulnerability arises from the fact that the Customers and Devices API handlers do not limit the query scope to the caller’s tenant. There is a potential for insecure direct object references. Attackers can registe...

Guchengwuyue YSHOP Image CRM Authorization Issues and Vulnerabilities

GuChengWuyue YSHOP Image CRM 2.1.3 and earlier versions have an authorization issue vulnerability. This vulnerability stems from insecure direct object references. Certified sales users can access other users’ customer records by providing arbitrary IDs. It is possible to enumerate IDs, read...

Kerwin FastBee authorization issue vulnerability

Kerwin FastBee 2.1.0 and earlier versions have an authorization issue vulnerability. This vulnerability stems from a lack of owner checks in the GroupController query, allowing for insecure direct object references. Certified low-privilege users can read, overwrite, reassign, rewrite device...

Public Knowledge Project Open Journal Systems Authorization Issues Vulnerabilities

The Public Knowledge Project Open Journal Systems 3.5.0-5 version has an authorization issue vulnerability. This vulnerability stems from insecure direct object references, allowing journal or subscription administrators to access subscriptions to other journals by providing arbitrary subscriptio...

Sugarforever ChatOllama Authorization Issue Vulnerability

Sugarforever ChatOllama has a licensing issue vulnerability. This vulnerability stems from insecure direct object references, allowing remote attackers to access other users’ private knowledge bases by providing continuous IDs. They can also enumerate IDs using the GET /api/knowledgebases/id or...

Data-Infra Cube-Studio authorization issue vulnerability

The data-infra cube-studio versions from 2026.09.01 and earlier have an authorization issue vulnerability. This vulnerability stems from insecure direct object references. Certified users can use IDs to stop, reset, clear, or redeploy other users’ Notebooks and services. An attacker can send...

i2nets abp-next-admin Authorization Issue Vulnerability

In the i2nets abp-next-admin version from 10.2.0 to 10.6.0, there is an authorization issue vulnerability. This vulnerability stems from insecure direct object references in the LINGYUN.Abp.AIManagement module. Certified users can access other users’ AI chat conversations by providing their...

LingGuoAI LingGuo short drama authorization issue vulnerabilities

LingGuoAI short dramas have an authorization issue. This issue stems from the lack of an owner check in the projects.Get method, resulting in a vulnerability involving insecure direct object references. Attackers can traverse digital IDs using GET, PUT, and DELETE /admin/v1/projects/:id, allowing...

ZhimaAi ChatWiki authorization issue vulnerability

zhimaAi chatwiki versions 2.9.6 and earlier have an authorization issue vulnerability. This vulnerability stems from insecure direct object references, which may allow authenticated users to access other tenants’ form filters by providing arbitrary formid values. This could result in reading filt...

Vastxie 99AI Authorization Issue Vulnerability

Vastxie 99AI versions 4.3.0 and earlier have an authorization issue vulnerability. This vulnerability stems from the lack of an owner check in querySingleChat, allowing for insecure direct object references. Unauthorized attackers can send fingerprint headers to obtain guest JWTs and traverse...