Realtime Collaboration Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:karnop:realtime-collaboration-platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Karnop (a04160eb-6c64-5af7-9af9-90c9870e8025) |
|---|---|
| Product | Realtime Collaboration Platform (efbd7676-964d-5870-ba5b-b8ad7f232000) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-27579 |
vulnerable | 2026-06-08 07:53:22.435060 |
CollabPlatform : CORS Misconfiguration Allows Arbitrary Origin With Credentials Leading to Authenticated Account Data Exposure
HIGH (7.4)
CollabPlatform is a full-stack, real-time doc collaboration platform. In all versions of CollabPlatform, the Appwrite project used by the application is misconfigured to allow arbitrary origins in CORS responses while also permitting credentialed requests. An attacker-controlled domain can issue authenticated cross-origin requests and read sensitive user account information, including email address, account identifiers, and MFA status. The issue did not have a fix at the time of publication.
Published: 2026-02-21T10:22:15.671Z
Updated: 2026-02-24T18:07:30.160Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.