https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 13:32:45 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-111688 <p>Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated users to evade role data-scope restrictions by sending openDataFilter=false. Attackers can append this parameter to the department getByParentId or search endpoints to retrieve the entire organization&#39;s department tree and names outside their assigned scope.</p> <p>Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated users to evade role data-scope restrictions by sending openDataFilter=false. Attackers can append this parameter to the department getByParentId or search endpoints to retrieve the entire organization&#39;s department tree and names outside their assigned scope.</p> https://db.gcve.eu/vuln/fkie_cve-2026-111688 https://db.gcve.eu/vuln/ghsa-cx4q-4p6j-g42p <p>Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated users to evade role data-scope restrictions by sending openDataFilter=false. Attackers can append this parameter to the department getByParentId or search endpoints to retrieve the entire organization&#39;s department tree and names outside their assigned scope.</p> <p>Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated users to evade role data-scope restrictions by sending openDataFilter=false. Attackers can append this parameter to the department getByParentId or search endpoints to retrieve the entire organization&#39;s department tree and names outside their assigned scope.</p> https://db.gcve.eu/vuln/ghsa-cx4q-4p6j-g42p