Skip to content
Threat Feed
Subscribe

Product

Arcadedb-Server (< 26.7.2)

1 brief RSS
high advisory

ArcadeDB Cross-Database IDOR Vulnerability Allows Unauthorized Data Access

ArcadeDB server versions prior to 26.7.2 are vulnerable to a cross-database Insecure Direct Object Reference (IDOR) due to improper authorization checks in several HTTP handlers, enabling a user authorized for a specific database to gain full read and write access to other unauthorized databases by directly accessing specific API endpoints.

arcadedb-server idor authorization-bypass arcadedb web-application
1r 1t