Threats tagged 'ghsa-4c79-56xr-vg4w'

OpenPanel versions before 3.0.0 have an SQL injection vulnerability that allows authenticated users to bypass tenant scoping. This occurs because unescaped profile filter names are injected into a JOIN subquery, enabling attackers to manipulate the query and read events from all projects. The vulnerability has a CVSS score of 6.5, indicating a medium severity impact.