Threats tagged 'ghsa-j23v-hgjh-xpmx'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.6	CVE-2026-116808OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authenticated users to read cross-tenant High8.62026-10-27GCVE DatabaseCVE-2026-116808 OpenPanel versions prior to 3.0.0 contain an SQL injection vulnerability that allows authenticated users to read data across tenant boundaries. By supplying a crafted property parameter to profile.values, attackers can inject SQL SELECT expressions with custom FROM/WHERE clauses, bypassing project_id scoping to access other projects' profiles, events, and sessions. Report on CVE-2026-116808 Vulnerability CWE-89 #ghsa-j23v-hgjh-xpmx	GCVE Database	2026-10-27

Page 1 of 1