devlive-community vulnerabilities (CVE)

CVE records published for devlive-community, newest first. Follow to get an email when a new one appears.

2 results

8.8High

CVE-2026-119654 13 days ago

DataCap through 2025.1.1 Privilege Escalation via allocationRole Missing Authorization

devlive-community DataCap

DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any authenticated user to escalate privileges by calling administrative role and menu management APIs. Attackers, including self-registered accounts, can send PUT requests to …

6.5Medium

CVE-2026-111614 27 days ago

DataCap through 2025.1.1 IDOR via BaseController.getInfoForPath Exposes Credentials

devlive-community DataCap

DataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticated users to read other users' datasources, snippets and dashboards by numeric id. Low-privileged attackers can enumerat…