168784 matches found
ECHO-C80E-9875-82A0
Bulletin has no description...
ECHO-B87A-6495-4598 Flagged by review on PR #19827: this ID needs a documented disposition here, not silent removal, since the raw scanner (matching on [email protected]'s version string alone) will otherwise keep reporting it as an open finding forever. Upstream's fix (GHSA-gvgg-2r3r-53x7) closes a path where OrganizationMemberResource trusted a client-session note to determine organization membership, letting a crafted note forge an org claim. 25.0.6's OrganizationMembershipMapper does not have that trust path at all — it always re-verifies membership directly against the organization store (provider.getByMember(user)) rather than trusting anything client- or session-supplied. With no client-session-note-based membership check present, the described forgery has no mechanism to exploit here.
Bulletin has no description...
ECHO-8712-B79A-9ACD
Bulletin has no description...
ECHO-A380-E585-5861
Bulletin has no description...
ECHO-0030-65EC-F55D
Bulletin has no description...
ECHO-9E12-01FD-007B
Bulletin has no description...
MINI-M826-28QR-7WCW
Bulletin has no description...
MINI-XP63-3C6H-36JQ
Bulletin has no description...
MINI-HHQ6-938J-VPCR
Bulletin has no description...
MINI-GXX6-W45Q-8G6M
Bulletin has no description...
MINI-HMQX-JX57-MCV8
Bulletin has no description...
MINI-JG92-PX5F-P49G
Bulletin has no description...
MINI-CRCV-35GV-72V4
Bulletin has no description...
MINI-8784-M5X8-G38R
Bulletin has no description...
MINI-M7HH-XCXF-848V
Bulletin has no description...
MINI-JQFH-XF7V-86GV
Bulletin has no description...
MINI-Q37G-59R4-9R2W
Bulletin has no description...
MINI-9MRF-5426-W22Q
Bulletin has no description...