Logo
Retour à la veille

CVE-2026-115322

Publié : 22 octobre 2026
Modifié : 22 octobre 2026
Lien officiel NVD
Score CVSS
4.3
MEDIUM

Description détaillée

Bytebase before 3.16.0 contains an authorization bypass vulnerability in GetTaskRunLog, GetTaskRunSession and PreviewTaskRunRollback that allows authenticated users to access other projects' task runs by UID. Attackers with permission on one project can supply foreign task or task run UIDs to read execution logs, database session details, and rollback SQL from other projects.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Références et Patchs

https://github.com/bytebase/bytebasehttps://github.com/bytebase/bytebase/blob/3.15.1/backend/api/v1/rollout_service.go#L505https://github.com/bytebase/bytebase/commit/bb553e8423b38c826cd7b1da5c7117080cc8705dhttps://github.com/bytebase/bytebase/issues/19369https://github.com/bytebase/bytebase/pull/19554https://github.com/bytebase/bytebase/releases/tag/3.16.0https://www.vulncheck.com/advisories/bytebase-before-3.16.0-authorization-bypass-via-rollout-service-task-run-handlers

Dernières Vulnérabilités

CVE-2026-13411

Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions which allows an authenticated attacker to crash the Playbooks plugin instance-wide via a crafted import request containing a null condition. Mattermost Advisory ID: MMSA-2026-00709

VOIR DÉTAILS

CVE-2026-115334

Lotus through 0.10.2 contains an authorization bypass vulnerability in ChangeUserOrganizationView.post that allows authenticated users to join any organization by supplying its UUID. Self-registered attackers who know another organization's UUID can send a POST request to /app/switch_organization/ to access that tenant's data and billing configuration.

VOIR DÉTAILS

CVE-2026-115333

Lotus through 0.10.2 contains an improper authentication vulnerability in the Go event ingestion middleware that validates API keys by prefix only, without checking the secret against the stored hashed_key. Attackers who know or obtain an API key prefix can submit usage events to POST /api/track/ as that organization, altering its metered usage and billing.

VOIR DÉTAILS