Lucene search
+L

1 matches found

OSV
OSV
added 2026/08/31 3:07 a.m.9 views

EEF-CVE-2026-82724 Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain

Summary Incorrect Authorization vulnerability in ash-project ashphoenix invokes the SubdomainHook authorization callback with a nil tenant, so tenant-scoped access checks never see the tenant they are meant to enforce. AshPhoenix.LiveView.SubdomainHook.onmount/4 attached a handleparams hook to...

7.6CVSS5.7AI score0.00246EPSS
SaveExploits0References4
Rows per page
Query Builder