Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/29 10:32 p.m.22 views

GHSA-GV23-XRM3-8C62 PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API

Summary The PraisonAI Platform API has two authorization failures that together break workspace isolation. The service layer for issues and projects performs global primary-key lookups without checking workspace ownership, so any authenticated user can read, modify, and delete resources in any...

8.8CVSS5.8AI score0.00044EPSS
SaveExploits0References2
Rows per page
Query Builder