Beveiligingsadvies

CVE-2026-92764

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-16 20:32:30

Laatst bijgewerkt 2026-09-16 20:32:30

Toegewezen door VulnCheck

CVSS-score 5.3

Status PUBLISHED

Beschrijving

OpenCVE before 3.1.0 fails to properly scope the organizations API endpoint to the token's organization, instead returning the token creator's memberships. Attackers with organization-scoped tokens can list and retrieve every organization their creator belongs to, bypassing intended token isolation boundaries.

← Alle CVE's bekijken Bekijk op cve.org ↗