Lucene search
+L

11 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•4 views

CVE-2025-14779: Improper Preservation of Permissions

The Secret Type Management REST API does not correctly isolate access controls when deleting a secret type. The on-delete cascade logic, when triggered, fails to enforce organizational boundaries, leading to the removal of secrets associated with that type across all organizations. Exploitation o...

3.8CVSS5.9AI score0.00318EPSS
SaveExploits0References3
Rows per page
Query Builder