254024 matches found
ECHO-B09D-C689-B716
Bulletin has no description...
ECHO-F035-45D7-D0F3
Bulletin has no description...
ECHO-70DF-01DF-0CB2
Bulletin has no description...
ECHO-4C35-FCD8-CA55
Bulletin has no description...
ECHO-BD3C-E7A2-8A3A
Bulletin has no description...
ECHO-D887-AB34-0A8F
Bulletin has no description...
ECHO-4A9E-3A8A-145E
Bulletin has no description...
ECHO-B87A-6495-4598 Flagged by review on PR #19827: this ID needs a documented disposition here, not silent removal, since the raw scanner (matching on [email protected]'s version string alone) will otherwise keep reporting it as an open finding forever. Upstream's fix (GHSA-gvgg-2r3r-53x7) closes a path where OrganizationMemberResource trusted a client-session note to determine organization membership, letting a crafted note forge an org claim. 25.0.6's OrganizationMembershipMapper does not have that trust path at all — it always re-verifies membership directly against the organization store (provider.getByMember(user)) rather than trusting anything client- or session-supplied. With no client-session-note-based membership check present, the described forgery has no mechanism to exploit here.
Bulletin has no description...
ECHO-69CC-B026-014F
Bulletin has no description...
ECHO-9E12-01FD-007B
Bulletin has no description...
ECHO-8443-C7B2-28C5
Bulletin has no description...
ECHO-C80E-9875-82A0
Bulletin has no description...
ECHO-8712-B79A-9ACD
Bulletin has no description...
ECHO-7E6C-6FDF-B723
Bulletin has no description...
ECHO-A685-7F88-C69B
Bulletin has no description...
ECHO-2E54-CE79-4B18
Bulletin has no description...
ECHO-0030-65EC-F55D
Bulletin has no description...
ECHO-A380-E585-5861
Bulletin has no description...