Beveiligingsadvies

CVE-2026-27603

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-06 04:07:49

Laatst bijgewerkt 2026-03-06 16:08:26

Toegewezen door GitHub_M

CVSS-score 8.7

Status PUBLISHED

Beschrijving

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.4, the chart filter endpoint POST /project/:project_id/chart/:chart_id/filter is missing both verifyToken and checkPermissions middleware, allowing unauthenticated users to access chart data from any team/project. This issue has been patched in version 4.8.4.

← Alle CVE's bekijken Bekijk op cve.org ↗