3 matches found
CVE-2026-86111
BookWyrm through version 0.9.1 contains an Insecure Direct Object Reference (IDOR) in the status edit endpoint. The root cause is a failure to validate user visibility permissions, allowing any authenticated attacker to read followers-only and direct-message reviews by enumerating sequential stat...
CVE-2019-6794
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure issue 5 of 6. A project guest user can view the last commit status of the default branch...
CVE-2024-12287
creationtimestamp| type| source ---|---|--- 2024-12-18 07:09:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113672571961317340 2024-12-18 08:40:32+00:00| seen| https://t.me/cvedetector/13171...