Onyx Enterprise IDOR: Unauthorized user-group membership modification leading to cross-group document disclosure

github.com 2026-08-18查看中文 →

Security AdvisoryHighOnyx

Affected:

Onyx Enterprise Edition < 4.3.0

Fixed in:

4.3.0

Referenced CVEs: CVE-2026-63178 · 6.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

SourceCoder 1.0 Privilege Escalation via Missing Authorization (CVE-2026-) 2026-08-23 Hospital Management System V1.0 SQL Injection Vulnerability in viewserviceype.php 2026-08-23 Hardcoded Default JWT Secret Authentication Bypass in vas3k/TaxHacker 2026-08-23 SSRF in vas3k/TaxHacker via IMAP Config 2026-08-23 Stored XSS in Stock Management System v1.0 via getOrderReport.php with POC 2026-08-23

Offline Archive

Offline screenshot & PDF are Pro-exclusive