22 matches found
CVE-2026-48074 OpenReception: Staff deletion removes pending invites cross-tenant by email match
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.6, when a TENANTADMIN deletes an existing staff user, the underlying StaffService.deleteStaffMember runs an additional invite cleanup that deletes from the central...
CVE-2026-48074 OpenReception: Staff deletion removes pending invites cross-tenant by email match
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.6, when a TENANTADMIN deletes an existing staff user, the underlying StaffService.deleteStaffMember runs an additional invite cleanup that deletes from the central...
CVE-2026-48074 OpenReception: Staff deletion removes pending invites cross-tenant by email match
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.6, when a TENANTADMIN deletes an existing staff user, the underlying StaffService.deleteStaffMember runs an additional invite cleanup that deletes from the central...
CVE-2026-47236 Solidtime team page exposes pending invitation and member emails to employees who lack invitations:view/members:view permission
Solidtime is an open-source time-tracking app. Prior to version 0.12.2, Solidtime defines an explicit invitations:view and members:view permissions that gates the official invitations and members API. The Jetstream web team page authorizes access with only belongsToTeam and then loads and...
EUVD-2024-2960
Malicious code in bioql PyPI...
Omise: Pending invites remain valid even after the inviter is removed.
The pending invites created by a removed admin remained valid, and members already added by the removed admin remained in the team with admin privileges, even after the inviter was removed...
GO-2024-3240 Grafana org admin can delete pending invites in different org in github.com/grafana/grafana
Grafana org admin can delete pending invites in different org in github.com/grafana/grafana...
BIT-GRAFANA-2024-10452
Organization admins can delete pending invites created in an organization they are not part of...
SUSE CVE-2024-10452
Organization admins can delete pending invites created in an organization they are not part of...
Grafana org admin can delete pending invites in different org
Organization admins can delete pending invites created in an organization they are not part of...
GHSA-66C4-2G2V-54QW Grafana org admin can delete pending invites in different org
Organization admins can delete pending invites created in an organization they are not part of...
CVE-2024-10452
Organization admins can delete pending invites created in an organization they are not part of...
UBUNTU-CVE-2024-10452
Organization admins can delete pending invites created in an organization they are not part of...
CVE-2024-10452
Organization admins can delete pending invites created in an organization they are not part of...
CVE-2024-10452
CVE-2024-10452 affects Grafana (open‑source platform). The issue allows Organization administrators to delete pending invites in an organization they are not part of, representing an Authorization Bypass/Improper Access protection described in the connected advisories. Exploitation details are no...
CVE-2024-10452
Organization admins can delete pending invites created in an organization they are not part of...
CVE-2024-10452
Organization admins can delete pending invites created in an organization they are not part of...
CVE-2024-10452
Organization admins can delete pending invites created in an organization they are not part of...
PT-2024-16292 · Grafana +2 · Grafana +2
Name of the Vulnerable Software and Affected Versions: Grafana affected versions not specified Description: The issue allows organization admins to delete pending invites created in an organization they are not part of. This can be exploited by a Grafana org admin to delete pending invites in...
