Approved changes feed: RSS · Atom
cpe:2.3:a:onyx:onyx:0.3.94:*:*:*:*:*:*:*part: a version: 0.3.94 update: *
| Vendor | Onyx (f350ba14-95ea-5599-a748-2ab259a89433) |
|---|---|
| Product | Onyx (4d4e3854-8101-51df-a9ca-594784f34055) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/onyx-platform/onyx |
purl2cpe | 2026-06-01 10:17:54.512960 |
pkg:maven/org.onyxplatform/onyx |
purl2cpe | 2026-06-01 10:17:54.512962 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9612 |
vulnerable | 2026-06-08 07:00:28.322109 |
Unauthorized Access in danswer-ai/danswer
MEDIUM (6.5)
In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. When the search page is set to be invisible, regular users cannot view the search page or access its functionalities from the front-end interface. However, the back-end does not verify the visibility status of the search page. Consequently, attackers can directly call the API to access the functionalities provided by the search page, bypassing the visibility restriction set by the administrator.
Published: 2025-03-20T10:11:08.077Z
Updated: 2025-03-20T13:34:33.986Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7767 |
vulnerable | 2026-06-08 06:58:23.394983 |
Improper Access Control in danswer-ai/danswer
MEDIUM (6.5)
An improper access control vulnerability exists in danswer-ai/danswer version v0.3.94. This vulnerability allows the first user created in the system to view, modify, and delete chats created by an Admin. This can lead to unauthorized access to sensitive information, loss of data integrity, and potential compliance violations.
Published: 2025-03-20T10:11:20.256Z
Updated: 2025-10-15T12:49:51.871Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.