6 matches found
EUVD-2026-120414
TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated attackers to manipulate the object-store id metadata within std.FileUpload columns without ownership validation during insert and update operations. Attackers can reference another...
CVE-2026-119759
TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated attackers to manipulate the object-store id metadata within std.FileUpload columns without ownership validation during insert and update operations. Attackers can reference another...
CVE-2026-119759
TrailBase versions 0.28.2 through 0.35.10 are affected by an insecure direct object reference (IDOR) vulnerability. The root cause is a lack of ownership validation when manipulating object-store id metadata within std.FileUpload columns during insert and update operations. Authenticated attacker...
CVE-2026-119759 TrailBase 0.28.2 < 0.35.10 IDOR via Record API File Column
TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated attackers to manipulate the object-store id metadata within std.FileUpload columns without ownership validation during insert and update operations. Attackers can reference another...
PT-2026-141118
TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated attackers to manipulate the object-store id metadata within std.FileUpload columns without ownership validation during insert and update operations. Attackers can reference another...
CVE-2026-119759: trailbaseio trailbase: TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated…
TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated attackers to manipulate the object-store id metadata within std.FileUpload columns without ownership validation during insert and update operations. Attackers can reference another...