Beveiligingsadvies

CVE-2026-56303

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-11 13:00:57

Laatst bijgewerkt 2026-07-13 16:11:08

Toegewezen door VulnCheck

CVSS-score 8.7

Status PUBLISHED

Beschrijving

Capgo before 12.128.2 contains an information disclosure vulnerability in the find_apikey_by_value PostgreSQL function marked SECURITY DEFINER and executable by the anon role. Unauthenticated attackers can call this function via the /rest/v1/rpc/find_apikey_by_value endpoint to retrieve sensitive API key metadata including user_id, mode, org scoping, and expiration details when supplied a valid key value.

← Alle CVE's bekijken Bekijk op cve.org ↗