Threats tagged 'ghsa-gjrj-qcgp-p97f'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2026-116812OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in cohort.service.ts that allows High7.12026-10-27GCVE DatabaseCVE-2026-116812 OpenPanel versions prior to 3.0.0 contain a SQL injection vulnerability in the profileColumnAccess function within cohort.service.ts. This flaw allows project-read members to inject SQL by providing unescaped profile filter column names. Exploitation can enable attackers to submit specially crafted cohort.preview filters that include subqueries within argMax, cityHash64, or comparison clauses, potentially exposing data from other tenants in the ClickHouse database. Report on CVE-2026-116812 Vulnerability CWE-89 #ghsa-gjrj-qcgp-p97f	GCVE Database	2026-10-27

Page 1 of 1