Threats tagged 'ghsa-5cv6-8j9w-94rq'

1 threat

Threats tagged 'ghsa-5cv6-8j9w-94rq'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-111667rebuild · Authorization Bypass Through User-Controlled Key Medium5.3EPSS 0.3%2026-10-16CVE Database V5CVE-2026-111667 REBUILD through 4.5.0 contains a missing authorization vulnerability in TaskCommentController.commentList that allows authenticated low-privileged users to read task comments without project membership checks. Attackers can supply the id of a task in a private project to the /project/comments/list endpoint to retrieve its comment content and attachment references. EPSS 0.3%Vulnerability getrebuild #ghsa-5cv6-8j9w-94rq	CVE Database V5	2026-10-16

Showing 1–1 of 1 result