Beveiligingsadvies

CVE-2026-89267

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-12 01:50:33

Laatst bijgewerkt 2026-09-12 01:50:33

Toegewezen door VulnCheck

CVSS-score 5.3

Status PUBLISHED

Beschrijving

starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchable_fields allowlist when configured as an empty list, allowing authenticated users to filter on non-searchable fields. Attackers can submit structured filter queries via the list API's where parameter to perform equality and comparison operations on excluded columns.

← Alle CVE's bekijken Bekijk op cve.org ↗