Beveiligingsadvies

CVE-2026-56245

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-24 11:53:11

Laatst bijgewerkt 2026-06-24 15:51:59

Toegewezen door VulnCheck

CVSS-score 8.8

Status PUBLISHED

Beschrijving

Supabase Capgo before 12.128.2 contains an authorization bypass vulnerability in the SECURITY DEFINER record_build_time RPC function that allows unauthenticated attackers to insert arbitrary build-time records. Attackers can exploit this by calling POST /rest/v1/rpc/record_build_time with a public API key to poison billing and quota data for any organization, enabling resource exhaustion and cross-tenant billing manipulation.

← Alle CVE's bekijken Bekijk op cve.org ↗