{"id":28219,"date":"2026-09-24T04:31:55","date_gmt":"2026-09-23T20:31:55","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-84713"},"modified":"2026-09-24T04:31:55","modified_gmt":"2026-09-23T20:31:55","slug":"cve-2026-84713","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-84713","title":{"rendered":"CVE-2026-84713 [MEDIUM] &#8211; A flaw was found in the automation-controller notification\n                  subsystem. Al"},"content":{"rendered":"<p>A flaw was found in the automation-controller notification<br \/>\n                  subsystem. Although NotificationTemplate.notification_<br \/>\n                  configuration is protected from API filtering, its recipient<br \/>\n                  value is copied in clear text into the unprotected<br \/>\n                  Notification.recipients field on every send. Because the<br \/>\n                  credential-types endpoint is listable by any authenticated<br \/>\n                  user and the API filter backend traverses object relations<br \/>\n                  without per-hop authorization, a user with no privileges can<br \/>\n                  use a relational filter as a boolean count-oracle to recover,<br \/>\n                  character by character and across organizations, the secret<br \/>\n                  recipient values of other tenants&#8217; notifications \u2014 including<br \/>\n                  PagerDuty service keys and Slack\/Mattermost\/RocketChat\/Webhook<br \/>\n                  bearer-token URLs. This flaw affects confidentiality.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A flaw was found in the automation-controller notification<br \/>\n                  subsystem. Although NotificationTemplate.notification_<br \/>\n                  configuration is protected from API filtering, its<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-28219","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/28219","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=28219"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=28219"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=28219"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}