Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w8qp-gqxj-mpmx

Опубликовано: 09 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 2.3
CVSS3: 3.1

Описание

An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration details.

An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration details.

EPSS

Процентиль: 3%
0.00141
Низкий

2.3 Low

CVSS4

3.1 Low

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 4.3
nvd
около 1 месяца назад

An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration details.

CVSS3: 6.5
altlinux
22 дня назад

ALT-PU-2026-18558: package `mongo7.0` update to version 7.0.45-alt1

EPSS

Процентиль: 3%
0.00141
Низкий

2.3 Low

CVSS4

3.1 Low

CVSS3

Дефекты

CWE-639