Defectdojo
Approved changes feed: RSS · Atom
cpe:2.3:a:owap:defectdojo:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Owap (a35a505b-5109-5441-a433-ed24457d45e9) |
|---|---|
| Product | Defectdojo (11207ed5-c899-58de-bda4-d3cc71ece220) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-7510 |
vulnerable | 2026-06-08 08:08:57.321309 |
OWAP DefectDojo Benchmark/Engagement/Product/Survey authorization
MEDIUM (6.3)
A vulnerability was determined in OWAP DefectDojo up to 2.55.4. Affected by this vulnerability is an unknown functionality of the component Benchmark/Engagement/Product/Survey. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.56.0 addresses this issue. This patch is called eb6120a379185d37eb1af17b69bb5614a830ab1f. Upgrading the affected component is recommended.
Published: 2026-04-30T23:00:24.288Z
Updated: 2026-05-01T19:30:20.129Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.