Lucene search
+L

5 matches found

OSV
OSV
•added 2026/09/22 8:36 p.m.•15 views

GHSA-72H8-WP98-7HCH Unleash: Missing await on permission check + cross-project IDOR in admin API

Summary Multiple authorization vulnerabilities in Unleash admin API, including a critical missing await that completely bypasses a permission check. Vulnerability 1: Missing await on Permission Check HIGH File: src/lib/features/segment/segment-controller.ts line 345 POST...

7.1CVSS5.9AI score0.00484EPSS
SaveExploits0References8
Rows per page
Query Builder