一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月21日

CVE-2026-113359 [MEDIUM] – Baserow before 2.3.0 contains a missing authorization vulnerability that allows any authen

未分类
📑 文章目录

Baserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated user to read field values from other workspaces via the unique_row_values API endpoint. Attackers can enumerate sequential field IDs to retrieve up to 100 distinct cell values per field from tables in workspaces they do not belong to.