https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:02:54 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-373144 EUVD-2026-373144 https://cve.radiocsirt.org/vuln/euvd-2026-373144 https://cve.radiocsirt.org/vuln/fkie_cve-2026-93758 <p>An insecure direct object reference in the nested attributes handling of the Mongoid object-document mapper may allow a user with basic application privileges to reference a record identifier that is not their own. Processing such a request can cause that record to be looked up without the usual ownership or scoping restrictions, then updated and linked to the requesting user&#39;s own record. This may result in unintended disclosure and unauthorized modification of data belonging to other users of the application.</p> <p>An insecure direct object reference in the nested attributes handling of the Mongoid object-document mapper may allow a user with basic application privileges to reference a record identifier that is not their own. Processing such a request can cause that record to be looked up without the usual ownership or scoping restrictions, then updated and linked to the requesting user&#39;s own record. This may result in unintended disclosure and unauthorized modification of data belonging to other users of the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-93758 https://cve.radiocsirt.org/vuln/ghsa-7x44-w6qh-mj7w <p>An insecure direct object reference in the nested attributes handling of the Mongoid object-document mapper may allow a user with basic application privileges to reference a record identifier that is not their own. Processing such a request can cause that record to be looked up without the usual ownership or scoping restrictions, then updated and linked to the requesting user&#39;s own record. This may result in unintended disclosure and unauthorized modification of data belonging to other users of the application.</p> <p>An insecure direct object reference in the nested attributes handling of the Mongoid object-document mapper may allow a user with basic application privileges to reference a record identifier that is not their own. Processing such a request can cause that record to be looked up without the usual ownership or scoping restrictions, then updated and linked to the requesting user&#39;s own record. This may result in unintended disclosure and unauthorized modification of data belonging to other users of the application.</p> https://cve.radiocsirt.org/vuln/ghsa-7x44-w6qh-mj7w