https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 10 Nov 2026 03:49:55 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-122317 <p>SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any account&#39;s details by supplying arbitrary userId values to user.getUserDetails. Attackers can iterate sequential integer user ids to harvest every user&#39;s email, name, avatar, currency, and bankingId and obapiProviderId open-banking identifiers.</p> <p>SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any account&#39;s details by supplying arbitrary userId values to user.getUserDetails. Attackers can iterate sequential integer user ids to harvest every user&#39;s email, name, avatar, currency, and bankingId and obapiProviderId open-banking identifiers.</p> https://db.gcve.eu/vuln/fkie_cve-2026-122317 https://db.gcve.eu/vuln/ghsa-qc4q-6gxc-hfjr <p>SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any account&#39;s details by supplying arbitrary userId values to user.getUserDetails. Attackers can iterate sequential integer user ids to harvest every user&#39;s email, name, avatar, currency, and bankingId and obapiProviderId open-banking identifiers.</p> <p>SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any account&#39;s details by supplying arbitrary userId values to user.getUserDetails. Attackers can iterate sequential integer user ids to harvest every user&#39;s email, name, avatar, currency, and bankingId and obapiProviderId open-banking identifiers.</p> https://db.gcve.eu/vuln/ghsa-qc4q-6gxc-hfjr