Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/02/23 1:30 p.m.2 views

CVE-2026-27579

CollabPlatform is a full-stack, real-time doc collaboration platform. In all versions of CollabPlatform, the Appwrite project used by the application is misconfigured to allow arbitrary origins in CORS responses while also permitting credentialed requests. An attacker-controlled domain can issue...

7.4CVSS5.6AI score0.00008EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/02/21 10:22 a.m.17 views

CVE-2026-27579 CollabPlatform : CORS Misconfiguration Allows Arbitrary Origin With Credentials Leading to Authenticated Account Data Exposure

CollabPlatform is a full-stack, real-time doc collaboration platform. In all versions of CollabPlatform, the Appwrite project used by the application is misconfigured to allow arbitrary origins in CORS responses while also permitting credentialed requests. An attacker-controlled domain can issue...

7.4CVSS0.00008EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/02/21 10:22 a.m.4 views

CVE-2026-27579

CollabPlatform is a full-stack, real-time doc collaboration platform. In all versions of CollabPlatform, the Appwrite project used by the application is misconfigured to allow arbitrary origins in CORS responses while also permitting credentialed requests. An attacker-controlled domain can issue...

7.4CVSS5.8AI score0.00008EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/02/21 10:22 a.m.3 views

CVE-2026-27579 CollabPlatform : CORS Misconfiguration Allows Arbitrary Origin With Credentials Leading to Authenticated Account Data Exposure

CollabPlatform is a full-stack, real-time doc collaboration platform. In all versions of CollabPlatform, the Appwrite project used by the application is misconfigured to allow arbitrary origins in CORS responses while also permitting credentialed requests. An attacker-controlled domain can issue...

7.4CVSS5.7AI score0.00008EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/02/21 12:0 a.m.3 views

PT-2026-21376

Name of the Vulnerable Software and Affected Versions CollabPlatform affected versions not specified Description The application’s Appwrite project is misconfigured, allowing arbitrary origins in Cross-Origin Resource Sharing CORS responses while also permitting credentialed requests. This allows...

7.4CVSS5.6AI score0.00008EPSS
Exploits1References7
CNNVD
CNNVD
added 2026/02/21 12:0 a.m.3 views

CollabPlatform 安全漏洞

CollabPlatform is a real-time collaboration platform developed by Manav Mahesh Sanger as an individual developer. CollabPlatform has a security vulnerability, which stems from improper CORS configuration in the Appwrite project. This allows credentials from any source to be requested, potentially...

7.4CVSS5.8AI score0.00008EPSS
Exploits1References1
Rows per page
Query Builder