VU#166125: Bisheng has authentication bypass vulnerabilities
概要
CVE-2026-96681 (IDOR Workflow Exposure) There are missing authorization controls across multiple version retrieval endpoints. The underlying source code retrieves flow and workflow version records based on user-supplied parameters without performing any data ownership or permission validation. Any a...
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
CVE-2026-96681 (IDOR Workflow Exposure) There are missing authorization controls across multiple version retrieval endpoints. The underlying source code retrieves flow and workflow version records based on user-supplied parameters without performing any data ownership or permission validation. Any authenticated user can query and read the complete Domain-Specific Language (DSL) configurations belonging to other accounts.
(CERT/CC Vulnerability Notes: VU#166125: Bisheng has authentication bypass vulnerabilities)
出典: CERT/CC Vulnerability Notes NVD
参照URL
- CERTCC-VULNOTES VU#166125: Bisheng has authentication bypass vulnerabilities