Lucene search
+L

6 matches found

NVD
NVD
•added 2026/08/04 10:17 p.m.•17 views

CVE-2026-18817

A security flaw has been discovered in Baserow up to 2.3.2. Affected by this issue is the function BaserowImpersonateAuthTokenSerializer of the file backend/src/baserow/api/admin/users/serializers.py of the component Inactive Non-Staff User Handler. Performing a manipulation results in improper...

2.2CVSS0.00323EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/08/04 10:00 p.m.•14 views

CVE-2026-18817 Baserow Inactive Non-Staff User serializers.py BaserowImpersonateAuthTokenSerializer improper authorization

A security flaw has been discovered in Baserow up to 2.3.2. Affected by this issue is the function BaserowImpersonateAuthTokenSerializer of the file backend/src/baserow/api/admin/users/serializers.py of the component Inactive Non-Staff User Handler. Performing a manipulation results in improper...

2.2CVSS4.6AI score0.00323EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/08/04 10:00 p.m.•57 views

CVE-2026-18817 Baserow Inactive Non-Staff User serializers.py BaserowImpersonateAuthTokenSerializer improper authorization

A security flaw has been discovered in Baserow up to 2.3.2. Affected by this issue is the function BaserowImpersonateAuthTokenSerializer of the file backend/src/baserow/api/admin/users/serializers.py of the component Inactive Non-Staff User Handler. Performing a manipulation results in improper...

2.2CVSS0.00323EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/04 10:00 p.m.•13 views

CVE-2026-18817 Baserow Inactive Non-Staff User serializers.py BaserowImpersonateAuthTokenSerializer improper authorization

A security flaw has been discovered in Baserow up to 2.3.2. Affected by this issue is the function BaserowImpersonateAuthTokenSerializer of the file backend/src/baserow/api/admin/users/serializers.py of the component Inactive Non-Staff User Handler. Performing a manipulation results in improper...

2.1CVSS4.5AI score
SaveExploits0References7
CVE
CVE
•added 2026/03/16 7:04 p.m.•42 views

CVE-2026-32267

Craft CMS vulnerable to privilege escalation via UsersController->actionImpersonateWithToken. From 4.0.0-RC1 up to 4.17.5 and 5.0.0-RC1 up to 5.9.11, a low-privilege or unauthenticated user with a shared URL can escalate to admin. Patch versions: 4.17.6 and 5.9.12. CVSS 4.0 base score 9.2 (CRI...

9.8CVSS5.7AI score0.00487EPSS
SaveExploits1References2Affected Software1
Gitee
Gitee
•added 2025/07/06 3:21 a.m.•137 views

OSCP-Prep

This is a comprehensive guide for information security infosec professionals, particularly those preparing for the OSCP Offensive Security Certified Professional exam. The guide is a collection of various files, including a PDF document, a text file, and a set of cheat sheets. The PDF document,...

6.8AI score
SaveExploits0
Rows per page
Query Builder