Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/03/27 10:51 p.m.1 views

CVE-2026-33541

TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 34, a flaw in TSPortal allowed attackers to create arbitrary user records in the database by abusing validation logic. Whil...

6.5CVSS5.9AI score0.00066EPSS
Exploits1References1
Github Security Blog
Github Security Blog
added 2026/03/27 3:42 p.m.4 views

TSPortal's Uncontrolled User Creation via Validation Side Effects Leads to Potential Denial of Service

Summary A flaw in TSPortal allowed attackers to create arbitrary user records in the database by abusing validation logic. While validation correctly rejected invalid usernames, a side effect within a validation rule caused user records to be created regardless of whether the request succeeded...

6.5CVSS5.8AI score0.00066EPSS
Exploits1References4Affected Software1
EUVD
EUVD
added 2026/03/27 3:42 p.m.1 views

EUVD-2026-16398

TSPortal's Uncontrolled User Creation via Validation Side Effects Leads to Potential Denial of Service...

6.5CVSS5.9AI score0.00066EPSS
Exploits1References3
EUVD
EUVD
added 2026/03/27 3:37 p.m.1 views

EUVD-2026-10067

TSPortal: Any user can forge self-deletion requests for any account...

8.4CVSS5.8AI score0.00034EPSS
Exploits1References4
NVD
NVD
added 2026/03/26 9:17 p.m.1 views

CVE-2026-33541

TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 34, a flaw in TSPortal allowed attackers to create arbitrary user records in the database by abusing validation logic. Whil...

6.5CVSS0.00066EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/03/26 8:27 p.m.1 views

CVE-2026-33541 TSPortal's Uncontrolled User Creation via Validation Side Effects Leads to Potential Denial of Service

TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 34, a flaw in TSPortal allowed attackers to create arbitrary user records in the database by abusing validation logic. Whil...

6.5CVSS5.9AI score0.00066EPSS
Exploits1References1
OSV
OSV
added 2026/03/26 8:27 p.m.1 views

CVE-2026-33541 TSPortal's Uncontrolled User Creation via Validation Side Effects Leads to Potential Denial of Service

TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 34, a flaw in TSPortal allowed attackers to create arbitrary user records in the database by abusing validation logic. Whil...

6.5CVSS6AI score0.00066EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/03/26 12:0 a.m.2 views

TSPortal 安全漏洞

TSPortal is a team management platform developed by Miraheze. Previous versions of TSPortal had security vulnerabilities; these vulnerabilities stemmed from defects in the validation logic, allowing attackers to create arbitrary user records, leading to uncontrolled database growth and...

6.5CVSS5.9AI score0.00066EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/03/08 1:44 a.m.1 views

CVE-2026-29788

TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 30, conversion of empty strings to null allows disguising DPA reports as genuine self-deletion reports. This issue has been...

8.4CVSS5.7AI score0.00034EPSS
Exploits1References1
NVD
NVD
added 2026/03/06 9:16 p.m.0 views

CVE-2026-29788

TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 30, conversion of empty strings to null allows disguising DPA reports as genuine self-deletion reports. This issue has been...

8.4CVSS0.00034EPSS
Exploits1References2
OSV
OSV
added 2026/03/06 8:31 p.m.0 views

CVE-2026-29788 TSPortal: Anyone can forge self-deletion requests of any user

TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 30, conversion of empty strings to null allows disguising DPA reports as genuine self-deletion reports. This issue has been...

8.4CVSS5.7AI score0.00034EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/03/06 12:0 a.m.3 views

TSPortal 安全漏洞

TSPortal is a team management platform developed by Miraheze. Previous versions of TSPortal had security vulnerabilities; these vulnerabilities stemmed from the conversion of empty strings to null values, which could lead to data protection reports being disguised as genuine self-deletion reports...

8.4CVSS5.8AI score0.00034EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/03/06 12:0 a.m.3 views

PT-2026-23750

Name of the Vulnerable Software and Affected Versions TSPortal versions prior to 30 Description TSPortal is a platform used by the WikiTide Foundation’s Trust and Safety team for managing reports, investigations, appeals, and transparency work. Prior to version 30, the conversion of empty strings...

8.4CVSS5.8AI score0.00034EPSS
Exploits1References11
Circl
Circl
added 2026/03/04 8:21 p.m.1 views

CVE-2026-29788

creationtimestamp| type| source ---|---|--- 2026-03-04 20:21:07+00:00| published-proof-of-concept| https://github.com/miraheze/TSPortal/security/advisories/GHSA-gfhq-7499-f3f2...

8.4CVSS5.8AI score0.00034EPSS
Exploits1References1
Rows per page
Query Builder