Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/22 2:31 p.m.12 views

GHSA-9237-RG5P-RHFW @saltcorn/data: Tenant user role is used for tenant creation role check

Summary When a tenant admin is logged out of the root domain e.g., saltcorn.com but logged in to their own tenant space as admin, they can simply append /tenant/create to their tenant URL. The system reads the role from the tenant context admin, and a new tenant is created on the root domain in...

8.7CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder