{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/data-platform-open--efeacd3/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:shaiwz:data-platform-open:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.1,"id":"CVE-2026-111695"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["data-platform-open (\u003c= efeacd3)"],"_cs_severities":["high"],"_cs_tags":["idor","api-security","web-application","cve-2026-111695"],"_cs_type":"advisory","_cs_vendors":["Shaiwz"],"content_html":"\u003cp\u003eShaiwz data-platform-open, up to and including commit efeacd3, is susceptible to an Insecure Direct Object Reference (IDOR) vulnerability (CVE-2026-111695). The application fails to properly validate the authorization of authenticated workspace members when interacting with datasource-related API endpoints. An attacker can manipulate numeric identifiers within API requests to perform unauthorized actions on datasources belonging to other workspaces. This flaw enables attackers to exfiltrate sensitive JDBC credentials, enumerate database schemas, and perform destructive actions, such as modifying or deleting datasource configurations. This vulnerability poses a significant risk to data confidentiality and integrity within multi-tenant environments where the platform is deployed.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows authenticated attackers to gain unauthorized access to cross-tenant data. Potential damage includes the theft of sensitive JDBC connection strings and database credentials, mapping of internal database structures, and unauthorized alteration or deletion of datasource configurations. This can lead to total loss of datasource integrity and potential lateral movement into backend database infrastructure.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePrioritized, concrete actions for security teams:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eApply the security patch for CVE-2026-111695 once provided by the vendor, or upgrade the application beyond commit efeacd3 immediately.\u003c/li\u003e\n\u003cli\u003eMonitor web server access logs for anomalous patterns of sequential or high-volume requests to the endpoints /datasource/detail, /listSchemaTable, /tableDetail, /update, and /delete, particularly those associated with authenticated user sessions that deviate from normal usage patterns.\u003c/li\u003e\n\u003cli\u003eAudit access control logs to identify users attempting to access resource IDs not assigned to their specific workspace.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-16T18:50:30Z","date_published":"2026-10-16T18:50:30Z","id":"https://feed.craftedsignal.io/briefs/2026-10-idor-shaiwz/","summary":"An IDOR vulnerability in Shaiwz data-platform-open allows authenticated users to access, enumerate, and modify foreign workspace datasources by manipulating numeric IDs in API requests.","title":"Insecure Direct Object Reference in Shaiwz data-platform-open","url":"https://feed.craftedsignal.io/briefs/2026-10-idor-shaiwz/"}],"language":"en","title":"CraftedSignal Threat Feed - Data-Platform-Open (\u003c= Efeacd3)","version":"https://jsonfeed.org/version/1.1"}