djust has an authorization bypass on the WebSocket/SSE mount path
CVE-2026-61594
### Impact The live (WebSocket) transport authorizes a mount via `check_view_auth`, not Django's `View.dispatch()` chain
#cwe-862
共收录 4087 条相关情报。
← 返回所有主题djust: SSE sessions are not bound to the authenticated user; the client-chosen session_id is the sole authorization capability (session hijack)
CVE-2026-61592
### Impact SSE sessions were keyed solely by a **client-chosen** `session_id` with no binding to the authenticated user
kan through 0.6.0 fails to properly validate board creation permissions in the GitHub project...
CVE-2026-92802
kan through 0.6.0 fails to properly validate board creation permissions in the GitHub project import endpoint, allowing
LibreTranslate through 1.9.6 omits the access_check decorator from the download_file route,...
CVE-2026-92803
LibreTranslate through 1.9.6 omits the access_check decorator from the download_file route, allowing unauthenticated acc
OpenSign through 2.41.3 fails to validate caller identity in the getDocument cloud function when...
CVE-2026-92794
OpenSign through 2.41.3 fails to validate caller identity in the getDocument cloud function when one-time-password verif
KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints,...
CVE-2026-92780
KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated
Yeti through 2.11.0 fails to validate caller permissions in the DELETE /api/v2/rbac/{id} endpoint...
CVE-2026-92783
Yeti through 2.11.0 fails to validate caller permissions in the DELETE /api/v2/rbac/{id} endpoint, allowing users with r
Rundeck through 6.2.1 fails to properly authorize the importConfig and importNodesSources...
CVE-2026-92763
Rundeck through 6.2.1 fails to properly authorize the importConfig and importNodesSources parameters in the project arch
Leantime before 3.9.6 contains an authorization bypass vulnerability in the HTMX plugin install...
CVE-2026-92772
Leantime before 3.9.6 contains an authorization bypass vulnerability in the HTMX plugin install endpoint that lacks perm
Pelican Panel versions before 1.0.0-beta35 enforce startup write permissions only through...
CVE-2026-92762
Pelican Panel versions before 1.0.0-beta35 enforce startup write permissions only through disabled form controls rather
WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view...
CVE-2026-92761
WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view-only users to perform pri
PatrowlManager through 1.8.4 contains an authorization bypass vulnerability in the events and...
CVE-2026-92753
PatrowlManager through 1.8.4 contains an authorization bypass vulnerability in the events and alerts API endpoints that
LibreTranslate through 1.9.6 omits the access_check decorator from the download_file route, allowing unauthenticated access to translated files. Attackers can bypass API key req...
CVE-2026-92803
LibreTranslate through 1.9.6 omits the access_check decorator from the download_file route, allowing unauthenticated acc
kan through 0.6.0 fails to properly validate board creation permissions in the GitHub project import endpoint, allowing guests to create boards despite lacking board:create perm...
CVE-2026-92802
kan through 0.6.0 fails to properly validate board creation permissions in the GitHub project import endpoint, allowing
OpenSign through 2.41.3 fails to validate caller identity in the getDocument cloud function when one-time-password verification is disabled. Attackers can supply a document iden...
CVE-2026-92794
OpenSign through 2.41.3 fails to validate caller identity in the getDocument cloud function when one-time-password verif
Yeti through 2.11.0 fails to validate caller permissions in the DELETE /api/v2/rbac/{id} endpoint, allowing users with read access to delete access control relationships. Attack...
CVE-2026-92783
Yeti through 2.11.0 fails to validate caller permissions in the DELETE /api/v2/rbac/{id} endpoint, allowing users with r
KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated user to access protected functionality. Attackers can ca...
CVE-2026-92780
KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated
Leantime before 3.9.6 contains an authorization bypass vulnerability in the HTMX plugin install endpoint that lacks permission validation. Authenticated users with limited roles...
CVE-2026-92772
Leantime before 3.9.6 contains an authorization bypass vulnerability in the HTMX plugin install endpoint that lacks perm
Rundeck through 6.2.1 fails to properly authorize the importConfig and importNodesSources parameters in the project archive import endpoint. Attackers with only the import actio...
CVE-2026-92763
Rundeck through 6.2.1 fails to properly authorize the importConfig and importNodesSources parameters in the project arch
PatrowlManager through 1.8.4 contains an improper access control vulnerability in the user listing API endpoint where the authorization decorator is commented out. Authenticated...
CVE-2026-92754
PatrowlManager through 1.8.4 contains an improper access control vulnerability in the user listing API endpoint where th