Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/04/22 2:31 p.m.•35 views

@saltcorn/data: Tenant user role is used for tenant creation role check

Summary When a tenant admin is logged out of the root domain e.g., saltcorn.com but logged in to their own tenant space as admin, they can simply append /tenant/create to their tenant URL. The system reads the role from the tenant context admin, and a new tenant is created on the root domain in...

5.8AI score
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/22 12:00 a.m.•8 views

PT-2026-36630

Summary When a tenant admin is logged out of the root domain e.g., saltcorn.com but logged in to their own tenant space as admin, they can simply append /tenant/create to their tenant URL. The system reads the role from the tenant context admin, and a new tenant is created on the root domain in...

8.7CVSS5.9AI score
SaveExploits0References3
Rows per page
Query Builder