Lucene search
+L

3 matches found

NVD
NVD
added 2026/09/02 2:17 a.m.5 views

CVE-2026-84485

APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without authentication, allowing unauthenticated attackers to retrieve member names, email addresses, and team hierarchy. Attackers can query the endpoint with space identifiers obtained from shared links or...

8.7CVSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/02 1:18 a.m.10 views

CVE-2026-84485 APITable through 1.13.0-beta.1 Missing Authentication on the Internal Organization Load or Search Endpoint

APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without authentication, allowing unauthenticated attackers to retrieve member names, email addresses, and team hierarchy. Attackers can query the endpoint with space identifiers obtained from shared links or...

8.7CVSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/02 1:18 a.m.6 views

EUVD-2026-69797

APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without authentication, allowing unauthenticated attackers to retrieve member names, email addresses, and team hierarchy. Attackers can query the endpoint with space identifiers obtained from shared links or...

8.7CVSS5.9AI score
SaveExploits0References5
Rows per page
Query Builder