Lucene search
+L

2 matches found

OSV
OSV
added 2026/07/13 3:46 p.m.5 views

PYSEC-2026-2407 Bugsink: Issue event views can show an event from another project if its UUID is known

Description Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look up that event without also requiring it to belong to the issue in the URL. This is a project-boundary authorization issue: a logged-in user with access to one project can view anoth...

3.1CVSS6AI score0.00154EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/06/05 9:43 p.m.20 views

Bugsink: Issue event views can show an event from another project if its UUID is known

Description Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look up that event without also requiring it to belong to the issue in the URL. This is a project-boundary authorization issue: a logged-in user with access to one project can view anoth...

3.1CVSS5.3AI score0.00154EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder