https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T04:06:47.170818+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-309104 EUVD-2026-309104 2026-10-13T04:06:47.172391+00:00 EUVD-2026-309104 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42279 fkie_cve-2026-42279 2026-10-13T04:06:47.172418+00:00

solidtime is an open-source time-tracking app. In version 0.12.0, the PUT /api/v1/organizations/{organization}/time-entries/{timeEntry} API accepts a route-bound timeEntry from another organization when the caller has time-entries:update:all in the URL organization, allowing a known foreign time-entry UUID to be modified and rebound to objects in the caller's organization. This issue has been patched in version 0.12.1.