Lucene search
Veracode Vulnerability DatabaseVERACODE:47119HistoryMay 22, 2024 - 9:41 a.m.
Information Disclosure
2024-05-2209:41:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
information disclosure
vulnerability
entity security
doctrine query cache
sql queries
user roles
7.7 High
AI Score
Confidence
Low
neos/flow is vulnerable to Information Disclosure. The vulnerability is due to entity security not properly integrating with the doctrine query cache, allowing users to reuse cached SQL queries built for other users based on their roles rather than their specific properties, potentially revealing entities not meant for them.
7.7 High
AI Score
Confidence
Low