4 matches found
CVE-2026-123485
Ground Station from 0.6.0 before 0.8.20 does not restrict the get-orbital-sources Socket.IO handler also exposed as get-tle-sources to administrators, although the orbital-source write handlers are admin-only. An authenticated operator-role user can call either handler to retrieve the plaintext...
EUVD-2026-118285
Ground Station from 0.6.0 before 0.8.20 does not restrict the get-orbital-sources Socket.IO handler also exposed as get-tle-sources to administrators, although the orbital-source write handlers are admin-only. An authenticated operator-role user can call either handler to retrieve the plaintext...
CVE-2026-123485
Ground Station from 0.6.0 before 0.8.20 does not restrict the get-orbital-sources Socket.IO handler also exposed as get-tle-sources to administrators, although the orbital-source write handlers are admin-only. An authenticated operator-role user can call either handler to retrieve the plaintext...
CVE-2026-123485: sgoudelis ground-station: Ground Station from 0.6.0 before 0.8.20 does not restrict the get-orbital-sources Socket.IO handler (also exposed as…
Ground Station from 0.6.0 before 0.8.20 does not restrict the get-orbital-sources Socket.IO handler also exposed as get-tle-sources to administrators, although the orbital-source write handlers are admin-only. An authenticated operator-role user can call either handler to retrieve the plaintext...