VU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltration
CERT/CC says Lowcoder 2.4.10 lets admins or developers read and run other tenants' library queries.
2
1 stories, newest first · one card per story
CERT/CC says Lowcoder 2.4.10 lets admins or developers read and run other tenants' library queries.
Today 1.3K readers · 2.1K views · 1.6K reads · all time 160K views