23 matches found
CVE-2026-111706
99AI through 4.3.0 contains a missing authentication vulnerability in the POST /api/chatLog/exportExcel route that allows unauthenticated attackers to export all users' chat logs. Attackers can send requests with controlled page, size, and optional email fields to download xlsx files containing...
EUVD-2026-102998
99AI through 4.3.0 contains a missing authentication vulnerability in the POST /api/chatLog/exportExcel route that allows unauthenticated attackers to export all users' chat logs. Attackers can send requests with controlled page, size, and optional email fields to download xlsx files containing...
CVE-2026-111706 99AI through 4.3.0 Unauthenticated Information Disclosure via chatLog exportExcel
99AI through 4.3.0 contains a missing authentication vulnerability in the POST /api/chatLog/exportExcel route that allows unauthenticated attackers to export all users' chat logs. Attackers can send requests with controlled page, size, and optional email fields to download xlsx files containing...
CVE-2026-111706 99AI through 4.3.0 Unauthenticated Information Disclosure via chatLog exportExcel
99AI through 4.3.0 contains a missing authentication vulnerability in the POST /api/chatLog/exportExcel route that allows unauthenticated attackers to export all users' chat logs. Attackers can send requests with controlled page, size, and optional email fields to download xlsx files containing...
CVE-2026-111706
Versions of 99AI up to and including 4.3.0 are vulnerable to an unauthenticated information disclosure due to a missing authentication check on the POST /api/chatLog/exportExcel route. This flaw allows unauthenticated attackers to export complete chat logs for all users by sending requests with c...
PT-2026-116105
99AI through 4.3.0 contains a missing authentication vulnerability in the POST /api/chatLog/exportExcel route that allows unauthenticated attackers to export all users' chat logs. Attackers can send requests with controlled page, size, and optional email fields to download xlsx files containing...
CVE-2026-109182
jshERP through 3.6 contains an incorrect authorization vulnerability in GET /supplier/exportExcel that allows authenticated users to bypass role data scope restrictions enforced by /supplier/list. Attackers restricted to personal or department data can export every supplier, customer and member...
CVE-2026-109182 jshERP through 3.6 Incorrect Authorization via /supplier/exportExcel
jshERP through 3.6 contains an incorrect authorization vulnerability in GET /supplier/exportExcel that allows authenticated users to bypass role data scope restrictions enforced by /supplier/list. Attackers restricted to personal or department data can export every supplier, customer and member...
EUVD-2026-97386
jshERP through 3.6 contains an incorrect authorization vulnerability in GET /supplier/exportExcel that allows authenticated users to bypass role data scope restrictions enforced by /supplier/list. Attackers restricted to personal or department data can export every supplier, customer and member...
CVE-2026-109182 jshERP through 3.6 Incorrect Authorization via /supplier/exportExcel
jshERP through 3.6 contains an incorrect authorization vulnerability in GET /supplier/exportExcel that allows authenticated users to bypass role data scope restrictions enforced by /supplier/list. Attackers restricted to personal or department data can export every supplier, customer and member...
CVE-2026-109182
jshERP versions through 3.6 are affected by an incorrect authorization vulnerability (CWE-863) in the GET /supplier/exportExcel endpoint. While the /supplier/list endpoint correctly enforces role data scope restrictions, this specific export function fails to do so. This allows authenticated user...
PT-2026-110571
Name of the Vulnerable Software and Affected Versions jshERP versions prior to 3.7 Description An incorrect authorization issue exists in the GET '/supplier/exportExcel' endpoint. This allows authenticated users to bypass role data scope restrictions that are normally enforced by the...
CVE-2026-109182: Incorrect Authorization
jshERP through 3.6 contains an incorrect authorization vulnerability in GET /supplier/exportExcel that allows authenticated users to bypass role data scope restrictions enforced by /supplier/list. Attackers restricted to personal or department data can export every supplier, customer and member...
CVE-2026-97721 Sanluan PublicCMS exportExcel/exportData SysUserAdminController.java CmsContentAdminController authorization
A weakness has been identified in Sanluan PublicCMS up to 6.202506.e. This vulnerability affects the function CmsContentAdminController of the file publiccms-parent/publiccms-core/src/main/java/com/publiccms/controller/admin/sys/SysUserAdminController.java of the component exportExcel/exportData...
CVE-2026-97721 Sanluan PublicCMS exportExcel/exportData SysUserAdminController.java CmsContentAdminController authorization
A weakness has been identified in Sanluan PublicCMS up to 6.202506.e. This vulnerability affects the function CmsContentAdminController of the file publiccms-parent/publiccms-core/src/main/java/com/publiccms/controller/admin/sys/SysUserAdminController.java of the component exportExcel/exportData...
EUVD-2026-86525
A weakness has been identified in Sanluan PublicCMS up to 6.202506.e. This vulnerability affects the function CmsContentAdminController of the file publiccms-parent/publiccms-core/src/main/java/com/publiccms/controller/admin/sys/SysUserAdminController.java of the component exportExcel/exportData...
PT-2026-98355
Name of the Vulnerable Software and Affected Versions Sanluan PublicCMS versions prior to 6.202506.e Description An authorization bypass exists in the exportExcel/exportData component. The issue resides within the CmsContentAdminController function located in the...
CVE-2026-97721: Authorization Bypass Through User-Controlled Key
A weakness has been identified in Sanluan PublicCMS up to 6.202506.e. This vulnerability affects the function CmsContentAdminController of the file publiccms-parent/publiccms-core/src/main/java/com/publiccms/controller/admin/sys/SysUserAdminController.java of the component exportExcel/exportData...
PT-2026-78649
Wekan is open source kanban built with Meteor. From 9.57 until 9.74, the /api/boards/:boardId/exportExcel route in models/exportExcel.js called the asynchronous exporterExcel.canExportuser authorization guard from models/server/ExporterExcel.js without awaiting it. The returned Promise was always...
