Lucene search
+L

2 matches found

OSV
OSV
added 2026/04/07 6:31 p.m.10 views

GHSA-H336-2WXM-PR6Q OpenViking contains a missing authorization vulnerability in the task polling endpoints

OpenViking versions prior to 0.3.3 contain a missing authorization vulnerability in the task polling endpoints that allows unauthorized attackers to enumerate or retrieve background task metadata created by other users. Attackers can access the /api/v1/tasks and /api/v1/tasks/taskid routes withou...

6.9CVSS5.8AI score0.00384EPSS
SaveExploits1References6
Rows per page
Query Builder