1 matches found
PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API
SummaryThe PraisonAI Platform API has two authorization failures that together break workspace isolation. The service layer for issues and projects performs global primary-key lookups without checking workspace ownership, so any authenticated user can read, modify, and delete resources in any...
8.8CVSS6AI score0.00442EPSS
SaveExploits0References5Affected Software1
20