CVE-2026-21759

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

CVE-2026-21759

HCL Hive is affected by an information exposure vulnerability in which Swagger API documentation was publicly accessible to unauthenticated users. No sensitive data (credentials, PII) was discovered, but the exposure increases the overall attack surface by revealing API structure to potential att...

EUVD-2026-64837

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

Urban Dictionary: Infinite Upvoting/Downvoting: Lockout Bypass, Plus: Exposed API Documentation

By sending an extra parameter kind=1 in the upvote/downvote API request, a user can vote as many times as he wants without any IP address restriction: http://api.urbandictionary.com/v0/vote?kind=1&direction=up&defid=94413 Seems harmless enough, but your site does depend on the accuracy of the...