CanvasService BOLA Vulnerability: Missing Organization Scoping Enables Unauthenticated Data Access and Tampering

github.com 2026-07-29查看中文 →

Security AdvisoryHighSuperplane

Affected:

superplanehq/superplane < 6354

Fixed in:

6354

Referenced CVEs: CVE-2026-57511 · 5.4

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Unauthenticated Task Status Modification Vulnerability in Code-Projects PHP Task Management System 2026-08-09 Unauthenticated SQL Injection in Code-Projects Task Management System via comment_count_user.php 2026-08-09 Authentication Bypass in Code-Projects PHP Task Management System via Missing Password Validation 2026-08-09 SSRF Vulnerability in anubissbe/ProjectHub-Mcp Webhook via complete_backend.js 2026-08-09 SQL Injection Authentication Bypass in Code-Projects Task Management System (CVE-2025-0846) 2026-08-09

Offline Archive

Offline screenshot & PDF are Pro-exclusive