11 matches found
CVE-2025-14779: Improper Preservation of Permissions
The Secret Type Management REST API does not correctly isolate access controls when deleting a secret type. The on-delete cascade logic, when triggered, fails to enforce organizational boundaries, leading to the removal of secrets associated with that type across all organizations. Exploitation o...
3.8CVSS5.9AI score0.00318EPSS
SaveExploits0References3
20