Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2026/04/22 2:31 p.m.14 views

@saltcorn/data: Tenant user role is used for tenant creation role check

Summary When a tenant admin is logged out of the root domain e.g., saltcorn.com but logged in to their own tenant space as admin, they can simply append /tenant/create to their tenant URL. The system reads the role from the tenant context admin, and a new tenant is created on the root domain in...

5.8AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/04/22 2:31 p.m.13 views

GHSA-9237-RG5P-RHFW @saltcorn/data: Tenant user role is used for tenant creation role check

Summary When a tenant admin is logged out of the root domain e.g., saltcorn.com but logged in to their own tenant space as admin, they can simply append /tenant/create to their tenant URL. The system reads the role from the tenant context admin, and a new tenant is created on the root domain in...

8.7CVSS5.8AI score
SaveExploits0References2
PostrgeSql
PostrgeSql
added 2016/03/31 12:0 a.m.576 views

Vulnerability in core server (CVE-2016-2193)

Plan cache might use wrong role context for RLS policy...

7.5CVSS7AI score0.01807EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder