PT-2026-51124

Summary server/handlers.go::handleTokenExchange lines 1804-1893 does not call isConnectorAllowedclient.AllowedConnectors, connID before issuing tokens, while sibling handlers do. This is a per-client connector ACL gap on the token-exchange endpoint; the redirect-flow paths enforce the same field...

Delphix Masking Engine 安全漏洞

Delphix Masking Engine is a data masking engine from Delphix, Inc. A security vulnerability exists in Delphix Masking Engine that stems from insufficient access control for the built-in Connector feature, which could lead to an internal database disclosure...

CVE-2022-45936

A vulnerability has been identified in Mendix Email Connector All versions V2.0.0. Affected versions of the module improperly handle access control for some module entities. This could allow authenticated remote attackers to read and manipulate sensitive information...