2 matches found
SUSE CVE-2026-63458
Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-beta.3, an authenticated user with viewer access to one project can supply another project through the project query parameter on project-scoped list endpoints, including...
7.1CVSS5.9AI score0.00303EPSS
SaveExploits0References2
CVE-2026-63458 Perses project query parameter authorization bypass exposes cross-project resources
Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-beta.3, an authenticated user with viewer access to one project can supply another project through the project query parameter on project-scoped list endpoints, including...
7.1CVSS5.9AI score0.00303EPSS
SaveExploits0References3
20