Threats tagged 'ghsa-7qhg-85q3-m2xj'

Nexent versions up to and including 2.7.0 contain an authorization bypass vulnerability in the check_file_access function. This flaw allows authenticated users in multi-tenant deployments to access knowledge-base files belonging to other tenants by circumventing tenant comparison checks. Attackers can list objects using GET /file/storage for presigned URLs or download files via GET /file/download/{object_name}. The vulnerability has a high severity with a CVSS 4.0 score of 7.1.