Lucene search
+L

3 matches found

PyPA
PyPA
•added 2026/07/23 11:41 a.m.•59 views

PraisonAI Slack app_mention bypasses configured user/channel authorization

PraisonAI Slack appmention bypasses configured user/channel authorization SummaryPraisonAI's Slack bot applies its configured allowedusers,allowedchannels, and unknown-user pairing policy in the normal Slackmessage event handler, but not in the adjacent Slack appmention eventhandler.A Slack...

8.3CVSS6.5AI score0.00215EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•35 views

PT-2026-64121

PraisonAI Slack app mention bypasses configured user/channel authorization Summary PraisonAI's Slack bot applies its configured allowed users, allowed channels, and unknown-user pairing policy in the normal Slack message event handler, but not in the adjacent Slack app mention event handler. A...

8.3CVSS6.5AI score0.00215EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•35 views

PT-2026-53146

PraisonAI Slack app mention bypasses configured user/channel authorization Summary PraisonAI's Slack bot applies its configured allowed users, allowed channels, and unknown-user pairing policy in the normal Slack message event handler, but not in the adjacent Slack app mention event handler. A...

8.3CVSS6.5AI score
SaveExploits0References3
Rows per page
Query Builder