Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 20:56:05 +0000 CVE-2026-113359 — Baserow before 2.3.0 Cross-Workspace Data Disclosure via unique_row_values Endpoint https://db.gcve.eu/vuln/cve-2026-113359 <p><strong>Affected:</strong> Baserow</p> <p>Baserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated user to read field values from other workspaces via the unique_row_values API endpoint. Attackers can enumerate sequential field IDs to retrieve up to 100 distinct cell values per field from tables in workspaces they do not belong to.</p> <p><strong>Affected:</strong> Baserow</p> <p>Baserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated user to read field values from other workspaces via the unique_row_values API endpoint. Attackers can enumerate sequential field IDs to retrieve up to 100 distinct cell values per field from tables in workspaces they do not belong to.</p> https://db.gcve.eu/vuln/cve-2026-113359