Apostrophe Technologies ApostropheCMS Authorization Issues Vulnerability

Apostrophe Technologies ApostropheCMS has an authorization issue vulnerability. This vulnerability stems from the lack of authentication and authorization checks in the API endpoint POST /api/v1/@apostrophecms/import-export/clean-export. This allows unauthorized users, including those who obtain...

Apostrophe Technologies ApostropheCMS information leakage vulnerability

Apostrophe Technologies’ ApostropheCMS versions prior to 4.34.0 have a vulnerability related to information leakage. This vulnerability arises from the use of the publicAPIProjection in the public REST API. By searching for member relationships and sorting orders, it is possible to determine whic...

Apostrophe Technologies ApostropheCMS Authorization Issues Vulnerability

Apostrophe Technologies’ ApostropheCMS versions prior to 4.33.0 have a licensing issue vulnerability. This vulnerability stems from the REST API used in core pages, which reads the complete page documentation using .permissionfalse during tree dumps. This bypasses checks for page types such as...

Eclipse ioFog resource management error vulnerability

Versions 3.8.0 through 3.9.1 of Eclipse ioFog contain a resource management error vulnerability. This vulnerability arises because, prior to authentication and RBAC, POST, PUT, and PATCH request bodies on routes that enable template substitution are rendered by an unrestricted Liquid engine...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Web Service API component. Vulnerable attackers with low privileges could access the system via the HTTP network. This allows them to update, insert, or delete...

Apostrophe Technologies ApostropheCMS information leakage vulnerability

Apostrophe Technologies’ ApostropheCMS versions prior to 4.33.0 have security vulnerabilities. These vulnerabilities stem from the lack of publicApiCheckAsync access control checks for REST route GET /api/v1//:id/locales and its equivalent page routes. This allows unauthenticated attackers to que...

Giuseppe Barchetta SuggestArr Authorization Issue Vulnerability

Giuseppe Barchetta’s SuggestArr version 3.0.0 and earlier have a vulnerability related to authorization. This vulnerability stems from the enforceauthentication function in the localbypass authentication mode. In this mode, the requestremoteaddr value is controlled by the client. However, this...

Apostrophe Technologies ApostropheCMS Authorization Issues Vulnerability

Apostrophe Technologies ApostropheCMS versions prior to 4.33.0 have a licensing issue vulnerability. This vulnerability stems from the existence of the exist-in-locale API, which does not apply document-level viewing or editing authorization standards. As a result, authenticated low-privilege use...

Eosphoros DB-GPT Authorization Issue Vulnerability

eosphoros DB-GPT versions 0.8.2 and earlier have an authorization issue vulnerability. This vulnerability stems from the /api/v1/chat/react-agent endpoint, which relies on a simulated getuserfromheaders function. This function grants administrative role to all callers. Unauthenticated attackers c...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server, including the MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, have security vulnerabilities. These vulnerabilities stem from issues with the ...

Apache CouchDB authorization issue vulnerability

Apache CouchDB versions 3.5.2 and earlier contain an authorization issue vulnerability. This vulnerability stems from chttpd’s lack of authorization checks, potentially allowing any request to read all contents of the user or replicator databases via unauthorized API endpoints...

Modoboa authorization issue vulnerability

Versions of Modoboa prior to 2.8.0 contained an authorization issue vulnerability. This vulnerability stemmed from insecure direct object references. Certified users can delete alarms from other domains using the POST /api/v2/alarms/bulkdelete/ endpoint. Attackers can enumerate sequential alarm I...

Modoboa authorization issue vulnerability

Versions of Modoboa prior to 2.8.0 contained an authorization issue vulnerability. This vulnerability stemmed from insecure direct object references. Certified users could create automatic reply messages for any email address by providing the mbox value of another user. Attackers could also send...

Bulwark Mail webmail server request forgery vulnerability

Versions of Bulwark Mail’s webmail prior to 1.9.2 have a server-side request forgeing vulnerability. This vulnerability stems from the unauthenticated POST /api/fetch-ical endpoint using a check-first-pattern approach; DNS verification and socket connection resolution are inconsistent, which may...

CodeWithCJ SparkyFitness Authorization Issue Vulnerability

Versions of CodeWithCJ SparkyFitness prior to 0.17.0 have a vulnerability related to authorization. This vulnerability arises from a lack of authorization checks. Authorized attackers can use the DELETE /api/foods/food-variants/:id endpoint to delete food variants for other users. They can also u...

Oracle Sales Foundation security vulnerabilities

The Oracle Sales Foundation versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Security API component, which may allow low-privilege attackers to access through the HTTP network and take control of the Oracle Sales Foundation...

WSO2 Enterprise Integrator Authorization Issue Vulnerability

WSO2 Enterprise Integrator 6.6.0 to 6.6.0.204 before version; WSO2 Identity Server 5.10.0 to 5.10.0.286 before version, 5.11.0 to 5.11.0.344 before version, 6.0.0 to 6.0.0.188 before version, 6.1.0 to 6.1.0.150 before version, and 7.0.0 to 7.0.0.35 before version; WSO2 API Manager 3.1.0 to...

Finsys Dockhand authorization issue vulnerability

Finsys Dockhand versions prior to 1.0.46 have an authorization vulnerability. This vulnerability arises because non-administrator users with the stacks:edit permission can use the /api/system/files/content path parameter to provide absolute paths for file reading, potentially leading to the...

Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)

Overview While performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered three new vulnerabilities in Eptura Archibus. A legacy API endpoint could be exploited to bypass authentication and run various functions without authentication CVSS: 8.6 High. Th...

EUVD-2026-104416

FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated api/guest/system/templateexists endpoint permits path traversal because templateExists uses Path::join on the attacker-controlled file parameter without rejecting .. sequences or...