4 matches found
FreeBSD : py-strawberry-graphql -- Incorrect authorization (1ee62c05-a646-11f1-b187-901b0edee044)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1ee62c05-a646-11f1-b187-901b0edee044 advisory. Patrick Arminio reports: PermissionExtension.resolve evaluates the return value of haspermission for...
EUVD-2026-51484
A flaw was found in the group policy evaluation logic of Keycloak, an identity and access management solution. When a group policy is set to extend permissions to child groups, the system incorrectly uses a simple text-based prefix check to verify group membership. This allows a user who belongs ...
CVE-2026-45254
In the case of the capnet service, when a key present in the old limit was omitted from the new limit, the missing key was treated as "allow any" instead of being rejected. In certain scenarios, an application that had previously restricted a subset of network operations could ask for a new limit...
Possibility to extend internal-share permissions using the API – ownCloud
An Attacker can extend the permission of a received subfolder share using the ocs api. Additional risk exists because the previlege extension is also possible on public-shares. Affected Software ownCloud Server 10.2.1 CVE-2019-???? core/55a29e0aaef5ebb55cf15ce309d7daaea4fb6c06 Action Taken Added...