Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/06 11:55 p.m.7 views

GHSA-8RF9-C59G-F82F WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning

Summary A cross-tenant authorization bypass in the knowledge base copy endpoint allows any authenticated user to clone duplicate another tenant’s knowledge base into their own tenant by knowing/guessing the source knowledge base ID. This enables bulk data exfiltration document/FAQ content across...

5.9CVSS5.8AI score0.00222EPSS
SaveExploits1References3
Rows per page
Query Builder