Threats tagged 'ghsa-5xgx-36cx-7963'

1 threat

Threats tagged 'ghsa-5xgx-36cx-7963'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.0	EPSS 0.2%	CVE-2026-108862APIPark · Authorization Bypass Through User-Controlled Key Medium6.0EPSS 0.2%2026-10-11CVE Database V5CVE-2026-108862 APIPark versions up to 1.9.7-beta have an insecure direct object reference vulnerability allowing authenticated users with authorization-view permission to access other applications' API keys by supplying a foreign authorization UUID. This bypasses the HideCredential setting and exposes plaintext API keys via the /api/v1/app/authorization endpoint. EPSS 0.2%Vulnerability APIParkLab #ghsa-5xgx-36cx-7963	CVE Database V5	2026-10-11

Showing 1–1 of 1 result