Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/04/22 2:31 p.m.•33 views

@saltcorn/data: Tenant user role is used for tenant creation role check

Summary When a tenant admin is logged out of the root domain e.g., saltcorn.com but logged in to their own tenant space as admin, they can simply append /tenant/create to their tenant URL. The system reads the role from the tenant context admin, and a new tenant is created on the root domain in...

5.8AI score
SaveExploits0References2Affected Software1
osv_ghsa
osv_ghsa
•added 2026/04/22 2:31 p.m.•30 views

GHSA-9237-RG5P-RHFW @saltcorn/data: Tenant user role is used for tenant creation role check

Summary When a tenant admin is logged out of the root domain e.g., saltcorn.com but logged in to their own tenant space as admin, they can simply append /tenant/create to their tenant URL. The system reads the role from the tenant context admin, and a new tenant is created on the root domain in...

8.7CVSS5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/22 12:00 a.m.•7 views

PT-2026-36630

Summary When a tenant admin is logged out of the root domain e.g., saltcorn.com but logged in to their own tenant space as admin, they can simply append /tenant/create to their tenant URL. The system reads the role from the tenant context admin, and a new tenant is created on the root domain in...

8.7CVSS5.9AI score
SaveExploits0References3
PostrgeSql
PostrgeSql
•added 2016/03/31 12:00 a.m.•589 views

Vulnerability in core server (CVE-2016-2193)

Plan cache might use wrong role context for RLS policy...

7.5CVSS7AI score0.01807EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder