6.5Mittel
CVE-2026-111614DataCap through 2025.1.1 IDOR via BaseController.getInfoForPath Exposes Credentials
Beschreibung
DataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticated users to read other users' datasources, snippets and dashboards by numeric id. Low-privileged attackers can enumerate auto-increment ids on the source, snippet and dashboard endpoints to retrieve serialized datasource host, port, username and cleartext passwords.
Schwachstellentyp (CWE):
CWE-639
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| devlive-community | DataCap | ≤ 2025.1.1 |
Referenzen und Patches
- https://hackmd.io/@hieuPenguinnn/metaforge-datacap-source-getbyid-cross-user-idor third-party-advisory
- https://github.com/devlive-community/MetaForge/blob/2025.1.1/core/datacap-service/src/main/java/io/edurt/data… technical-description
- https://github.com/devlive-community/MetaForge/blob/2025.1.1/core/datacap-server/src/main/java/io/edurt/datac… technical-description
- VulnCheck Advisory: DataCap through 2025.1.1 IDOR via BaseController.getInfoForPath Exposes Credentials third-party-advisory