Threats tagged 'ghsa-mq8q-r5x2-4283'

Lightdash versions from 0.2609.0 up to but not including 3.137.0 have an authorization bypass vulnerability in the RenameService. This flaw allows authenticated users with update permission on one project to access and modify dashboards of other projects due to improper verification of project identifiers. Attackers can manipulate dashboard filters or read field metadata from unauthorized projects.