Threats tagged 'ghsa-3cvf-5chq-5r99'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.4	CVE-2025-63291When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB object IDs to uniquely Medium5.42025-11-14GCVE DatabaseCVE-2025-63291 Alteryx Server versions 2022.1.1.42654 and 2024.1 have a vulnerability where API requests use MongoDB object IDs to identify data without verifying user permissions. This allows unauthorized users to access records belonging to others, including sensitive data such as administrative and private studio API keys. Report on CVE-2025-63291 Vulnerability CWE-639 #ghsa-3cvf-5chq-5r99	GCVE Database	2025-11-14

Page 1 of 1