CVE-2026-115321

Bytebase before 3.16.0 contains an authorization bypass vulnerability in the UpdateIssueComment handler that allows low-privileged project users to modify comments in other projects by supplying a foreign comment UID. Attackers with any project role, including Project Viewer, can set their own...

CVE-2026-115321

Bytebase before 3.16.0 contains an authorization bypass vulnerability in the UpdateIssueComment handler that allows low-privileged project users to modify comments in other projects by supplying a foreign comment UID. Attackers with any project role, including Project Viewer, can set their own...

CVE-2026-115321 Bytebase before 3.16.0 Authorization Bypass via UpdateIssueComment

Bytebase before 3.16.0 contains an authorization bypass vulnerability in the UpdateIssueComment handler that allows low-privileged project users to modify comments in other projects by supplying a foreign comment UID. Attackers with any project role, including Project Viewer, can set their own...

CVE-2026-115321 Bytebase before 3.16.0 Authorization Bypass via UpdateIssueComment

Bytebase before 3.16.0 contains an authorization bypass vulnerability in the UpdateIssueComment handler that allows low-privileged project users to modify comments in other projects by supplying a foreign comment UID. Attackers with any project role, including Project Viewer, can set their own...

CVE-2026-115321 Bytebase before 3.16.0 Authorization Bypass via UpdateIssueComment

Bytebase before 3.16.0 contains an authorization bypass vulnerability in the UpdateIssueComment handler that allows low-privileged project users to modify comments in other projects by supplying a foreign comment UID. Attackers with any project role, including Project Viewer, can set their own...

CVE-2026-115321

Bytebase versions before 3.16.0 are susceptible to an authorization bypass vulnerability within the UpdateIssueComment handler. The root cause allows low-privileged users, including those with a Project Viewer role, to overwrite comments in projects they cannot access. This is achieved by setting...

EUVD-2026-108123

Bytebase before 3.16.0 contains an authorization bypass vulnerability in the UpdateIssueComment handler that allows low-privileged project users to modify comments in other projects by supplying a foreign comment UID. Attackers with any project role, including Project Viewer, can set their own...

PT-2026-121359

Bytebase before 3.16.0 contains an authorization bypass vulnerability in the UpdateIssueComment handler that allows low-privileged project users to modify comments in other projects by supplying a foreign comment UID. Attackers with any project role, including Project Viewer, can set their own...

Bytebase authorization issue vulnerability

Versions prior to Bytebase 3.16.0 contain an authorization issue vulnerability. This vulnerability stems from an authorization bypass in the UpdateIssueComment handler, allowing users with low privileges to modify comments on other projects by providing a valid external comment UID...