https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 01 Nov 2026 15:58:04 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-119646 <p>Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authenticated users to read other sites&#39; report data because clickstream and transaction reports are not scoped to the authorized siteId. Users with view_reports on one site can supply that siteId with another site&#39;s session_id or order_id to read its visit history, IP addresses, user agents and order data.</p> <p>Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authenticated users to read other sites&#39; report data because clickstream and transaction reports are not scoped to the authorized siteId. Users with view_reports on one site can supply that siteId with another site&#39;s session_id or order_id to read its visit history, IP addresses, user agents and order data.</p> https://db.gcve.eu/vuln/fkie_cve-2026-119646 https://db.gcve.eu/vuln/ghsa-39w6-qc54-g7cg <p>Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authenticated users to read other sites&#39; report data because clickstream and transaction reports are not scoped to the authorized siteId. Users with view_reports on one site can supply that siteId with another site&#39;s session_id or order_id to read its visit history, IP addresses, user agents and order data.</p> <p>Open Web Analytics before 1.14.1 contains an authorization vulnerability that allows authenticated users to read other sites&#39; report data because clickstream and transaction reports are not scoped to the authorized siteId. Users with view_reports on one site can supply that siteId with another site&#39;s session_id or order_id to read its visit history, IP addresses, user agents and order data.</p> https://db.gcve.eu/vuln/ghsa-39w6-qc54-g7cg