8 matches found
Bugsink: Issue event views can show an event from another project if its UUID is known
DescriptionBugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look up that event without also requiring it to belong to the issue in the URL.This is a project-boundary authorization issue: a logged-in user with access to one project can view another...
3.1CVSS6AI score0.00154EPSS
SaveExploits0References6Affected Software1
20