Threats tagged 'ghsa-82c7-jq78-hwgw'

PipesHub versions from 0.3.0 up to but not including 0.10.0 have an event type injection vulnerability. This flaw allows authenticated users with the crawl:write scope to delete connectors by injecting malicious values into the :connector path segment. Exploitation bypasses intended permission checks, enabling deletion of connector instances and purging of record embeddings.