1 matches found
PT-2026-110216
Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs. Two of them include secrets the caller is not meant to receive. The public API's channel delete returns the deleted integration row, including the channel's platfor...
5.3CVSS5.9AI score0.00283EPSS
SaveExploits0References4
20