Threats Tagged 'ghsa-p6ph-3jx2-3337'
View all threats tagged with 'ghsa-p6ph-3jx2-3337'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-p6ph-3jx2-3337'
Click on any threat for detailed analysis and mitigation recommendations
V4: OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search 0 OpenList v4 before 4.2.4 contains an authorization bypass and information disclosure vulnerability in its search API due to improper path prefix validation and unfiltered backend counting in the Bleve search engine. A low-privileged user can bypass BasePath restrictions to access metadata of files in unauthorized sibling directories and confirm the existence of sensitive files via the total count field. This defeats the intended namespace isolation and allows enumeration of hidden infrastructure and sensitive file metadata. Join the discussion | GCVE Database | 07/24/2026, 22:32:17 UTC Added: 07/25/2026, 23:09:17 UTC |
Showing 1 to 1 of 1 result