CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

32 matches found

Github Security Blog•added 2026/03/12 2:20 p.m.•11 views

OliveTin Vulnerable to Unauthorized Action Output Disclosure via EventStream

Summary OliveTin’s live EventStream broadcasts execution events and action output to authenticated dashboard subscribers without enforcing per-action authorization. A low-privileged authenticated user can receive output from actions they are not allowed to view, resulting in broken access control...

7.1CVSS6AI score0.00431EPSS

Exploits1References3Affected Software1

CVE•added 2026/03/11 8:5 p.m.•13 views

CVE-2026-32102

OliveTin's 3000.10.2 and earlier versions expose action output via the live EventStream to authenticated dashboard subscribers without per-action authorization, enabling a low-privileged user to view restricted outputs. Affected component: EventStream/broadcast of execution events and action outp...

7.1CVSS5.9AI score0.00431EPSS

Exploits1References1Affected Software1

OSV•added 2026/03/11 8:5 p.m.•4 views

CVE-2026-32102 OliveTin Unauthorized Action Output Disclosure via EventStream

OliveTin gives access to predefined shell commands from a web interface. In 3000.10.2 and earlier, OliveTin’s live EventStream broadcasts execution events and action output to authenticated dashboard subscribers without enforcing per-action authorization. A low-privileged authenticated user can...

7.1CVSS6AI score0.00431EPSS

Exploits1References3