Lucene search
+L

5 matches found

OSV
OSV
added 2026/07/07 11:45 a.m.11 views

PYSEC-2026-2006 Defining resource name as integer may give unintended access in vantage6

Impact Malicious users may try to get access to resources they are not allowed to see, by creating resources with integers as names. One example where this is a risk, is when users define which users are allowed to run algorithms on their node. This may be defined by username or user id. Now, for...

5.4CVSS6.1AI score0.00402EPSS
SaveExploits0References9
Rows per page
Query Builder