Lucene search
+L

2 matches found

NVD
NVD
added 2026/07/10 9:16 p.m.15 views

CVE-2026-55880

OpenReplay is a self-hosted session replay suite. In 1.27.0 and earlier, three dashboard and note mutation functions ran their SQL without the ownership predicate that their sibling read and edit functions use: notes.delete filtered only on note id and project id, while dashboards.updatewidget an...

7.1CVSS0.00195EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/10 8:42 p.m.6 views

CVE-2026-55880

OpenReplay is a self-hosted session replay suite. In 1.27.0 and earlier, three dashboard and note mutation functions ran their SQL without the ownership predicate that their sibling read and edit functions use: notes.delete filtered only on note id and project id, while dashboards.updatewidget an...

7.1CVSS6.1AI score0.00195EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder