https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 12 Nov 2026 21:43:17 +0000 https://db.gcve.eu/vuln/cve-2026-122317 <p><strong>Affected:</strong> oss-apps SplitPro</p> <p>SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any account&#39;s details by supplying arbitrary userId values to user.getUserDetails. Attackers can iterate sequential integer user ids to harvest every user&#39;s email, name, avatar, currency, and bankingId and obapiProviderId open-banking identifiers.</p> <p><strong>Affected:</strong> oss-apps SplitPro</p> <p>SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any account&#39;s details by supplying arbitrary userId values to user.getUserDetails. Attackers can iterate sequential integer user ids to harvest every user&#39;s email, name, avatar, currency, and bankingId and obapiProviderId open-banking identifiers.</p> https://db.gcve.eu/vuln/cve-2026-122317