Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/06/19 9:43 p.m.•28 views

stistigmem-node: quarantine review surface exposes and mutates other tenants' quarantined facts (cross-tenant BOLA)

Summary On a multi-tenant stigmem node, a tenant administrator could list, read, and admit or reject quarantined facts belonging to other tenants. The list/count queries and getquarantinedfact in routes/quarantine.py lacked an f.tenantid = identity.tenantid predicate, and the garden lookup was no...

5.5AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder