Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 05:17:23 +0000 CVE-2026-42279 — solidtime: Time entry update endpoint allows cross-organization modification of a known time-entry UUID https://cve.radiocsirt.org/vuln/cve-2026-42279 <p><strong>Affected:</strong> solidtime-io solidtime</p> <p>solidtime is an open-source time-tracking app. In version 0.12.0, the PUT /api/v1/organizations/{organization}/time-entries/{timeEntry} API accepts a route-bound timeEntry from another organization when the caller has time-entries:update:all in the URL organization, allowing a known foreign time-entry UUID to be modified and rebound to objects in the caller&#39;s organization. This issue has been patched in version 0.12.1.</p> <p><strong>Affected:</strong> solidtime-io solidtime</p> <p>solidtime is an open-source time-tracking app. In version 0.12.0, the PUT /api/v1/organizations/{organization}/time-entries/{timeEntry} API accepts a route-bound timeEntry from another organization when the caller has time-entries:update:all in the URL organization, allowing a known foreign time-entry UUID to be modified and rebound to objects in the caller&#39;s organization. This issue has been patched in version 0.12.1.</p> https://cve.radiocsirt.org/vuln/cve-2026-42279