Lucene search
+L

8 matches found

SUSE CVE
SUSE CVE
•added 2026/09/05 12:32 a.m.•20 views

SUSE CVE-2026-53471

A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...

9.6CVSS5.9AI score0.00514EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/18 2:32 p.m.•13 views

GO-2026-6228 Openshift Migration Advisor agent-API fails to validate JWT source_id claim, allowing cross-tenant data manipulation in github.com/kubev2v/migration-planner

Openshift Migration Advisor agent-API fails to validate JWT sourceid claim, allowing cross-tenant data manipulation in github.com/kubev2v/migration-planner...

9.6CVSS5.7AI score0.00514EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/06/10 3:31 p.m.•20 views

Openshift Migration Advisor agent-API fails to validate JWT source_id claim, allowing cross-tenant data manipulation

A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...

9.6CVSS5.9AI score0.00514EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/10 12:00 a.m.•5 views

CVE-2026-53471: Authorization Bypass Through User-Controlled Key

A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...

9.6CVSS5.9AI score0.00514EPSS
SaveExploits0References5
Circl
Circl
•added 2025/09/08 5:34 p.m.•23 views

CVE-2025-58801

creationtimestamp| type| source ---|---|--- 2025-09-08 17:34:45+00:00| seen| Telegram/HTMmcPYImXFch9EWQ9RXb78PhDZ5C7lEAbY9khA04qt94...

5.4CVSS4.8AI score0.00136EPSS
SaveExploits0
Circl
Circl
•added 2024/09/19 8:20 p.m.•23 views

CVE-2024-8651

creationtimestamp| type| source ---|---|--- 2024-09-19 20:20:22+00:00| seen| https://t.me/cvedetector/6062...

6.9CVSS4.8AI score0.00427EPSS
SaveExploits0References1
Circl
Circl
•added 2024/02/02 5:26 p.m.•17 views

CVE-2023-41274

creationtimestamp| type| source ---|---|--- 2024-02-02 17:26:53+00:00| seen| https://t.me/ctinow/178171 2024-02-25 11:11:59+00:00| seen| https://t.me/ctinow/192834...

5.5CVSS5AI score0.00437EPSS
SaveExploits0References2
Circl
Circl
•added 2023/04/27 6:40 p.m.•23 views

CVE-2023-2348

creationtimestamp| type| source ---|---|--- 2023-04-27 18:40:12+00:00| seen| https://t.me/cibsecurity/62985...

9.8CVSS6.9AI score0.0082EPSS
SaveExploits1References1
Rows per page
Query Builder