6 matches found
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the DELETE endpoint at /api/v1/sources, which does not enforce proper authorization or filtering. An attacker can remove all tenant data, including sources, agents, and assessments, by...
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the DELETE endpoint at /api/v1/sources, which does not enforce proper authorization or filtering. An attacker can remove all tenant data, including sources, agents, and assessments, by...
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the DELETE endpoint at /api/v1/sources, which does not enforce proper authorization or filtering. An attacker can remove all tenant data, including sources, agents, and assessments, by...
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the DELETE endpoint at /api/v1/sources, which does not enforce proper authorization or filtering. An attacker can remove all tenant data, including sources, agents, and assessments, by...
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the DELETE endpoint at /api/v1/sources, which does not enforce proper authorization or filtering. An attacker can remove all tenant data, including sources, agents, and assessments, by...
CVE-2026-53469 Migration-planner: unprotected delete endpoint wipes all tenant data
A flaw was found in migration-planner. An authenticated user can exploit this vulnerability by sending a DELETE request to the /api/v1/sources route, which lacks proper authorization and filtering. This allows for the destruction of all customer data, including sources, agents, and assessments,...