OpenPanel information disclosure vulnerability

Versions prior to OpenPanel 3.0.0 contain an information disclosure vulnerability. This vulnerability stems from improper handling of client.list tRPC queries. Project members with read-level access can request client.list using a project ID, thereby obtaining a complete Client record including t...

OpenPanel information disclosure vulnerability

Versions prior to OpenPanel 3.0.0 contain an information disclosure vulnerability. This vulnerability arises because notification.rules queries bypass redactIntegration, allowing members of read-only projects to obtain plaintext integration keys. Additionally, they can utilize notification.rules’...