Lucene search
+L

1 matches found

osv_eef
osv_eef
•added 2026/08/30 11:59 a.m.•24 views

EEF-CVE-2026-81316 Same-named aggregates with differing filters are conflated in AshSql

Summary Incorrect Authorization vulnerability in ash-project ashsql allows a caller to receive an aggregate value computed over rows a more restrictive filter should have excluded, disclosing counts, sums, or lists across an authorization or tenancy boundary. AshSql.Aggregate.differentqueries?/2...

2.1CVSS5.9AI score0.00171EPSS
SaveExploits0References4
Rows per page
Query Builder