Beveiligingsadvies

CVE-2026-42092

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-04 17:30:46

Laatst bijgewerkt 2026-05-06 13:42:39

Toegewezen door GitHub_M

CVSS-score 6.5

Status PUBLISHED

Beschrijving

titra is an open source time tracking project. In version 0.99.52, the globalsettings Meteor publication returns all global settings without any admin or role check. Any authenticated user can subscribe via DDP and receive sensitive configuration fields such as google_secret, openai_apikey, and google_clientid. At time of publication no public patch is available.

← Alle CVE's bekijken Bekijk op cve.org ↗