Vulners
Lucene search
2 matches found
CVE-2026-33326
Keystone is a content management system for Node.js. Prior to version 6.5.2, field.isFilterable access control can be bypassed in findMany queries by passing a cursor. This can be used to confirm the existence of records by protected field values. The fix for CVE-2025-46720 field-level isFilterab...
4.3CVSS5.7AI score0.00062EPSS
Exploits0References1
CVE-2026-33326
Keystone is a content management system for Node.js. Prior to version 6.5.2, field.isFilterable access control can be bypassed in findMany queries by passing a cursor. This can be used to confirm the existence of records by protected field values. The fix for CVE-2025-46720 field-level isFilterab...
4.3CVSS5.7AI score0.00062EPSS
Exploits0References2Affected Software1
20