https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 11 Nov 2026 18:05:12 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-119759 <p>TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated attackers to manipulate the object-store id metadata within std.FileUpload columns without ownership validation during insert and update operations. Attackers can reference another user&#39;s or table&#39;s file id in a record they own to read the victim&#39;s file bytes through their own record, or trigger permanent deletion of the victim&#39;s file by deleting or nulling their own record, while also using a $like filter on the file column to brute-force recover stripped ids character by character.</p> <p>TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated attackers to manipulate the object-store id metadata within std.FileUpload columns without ownership validation during insert and update operations. Attackers can reference another user&#39;s or table&#39;s file id in a record they own to read the victim&#39;s file bytes through their own record, or trigger permanent deletion of the victim&#39;s file by deleting or nulling their own record, while also using a $like filter on the file column to brute-force recover stripped ids character by character.</p> https://db.gcve.eu/vuln/fkie_cve-2026-119759 https://db.gcve.eu/vuln/ghsa-cr83-43p9-27qg <p>TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated attackers to manipulate the object-store id metadata within std.FileUpload columns without ownership validation during insert and update operations. Attackers can reference another user&#39;s or table&#39;s file id in a record they own to read the victim&#39;s file bytes through their own record, or trigger permanent deletion of the victim&#39;s file by deleting or nulling their own record, while also using a $like filter on the file column to brute-force recover stripped ids character by character.</p> <p>TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated attackers to manipulate the object-store id metadata within std.FileUpload columns without ownership validation during insert and update operations. Attackers can reference another user&#39;s or table&#39;s file id in a record they own to read the victim&#39;s file bytes through their own record, or trigger permanent deletion of the victim&#39;s file by deleting or nulling their own record, while also using a $like filter on the file column to brute-force recover stripped ids character by character.</p> https://db.gcve.eu/vuln/ghsa-cr83-43p9-27qg