Approved changes feed: RSS · Atom
cpe:2.3:a:apiparklab:apipark:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Apiparklab (902de04e-c11e-5e1c-bf73-e3bd473a6a96) |
|---|---|
| Product | Apipark (8437bbd3-6440-5ddb-9653-845efe81e9b1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-108862 |
vulnerable | 2026-11-03 10:18:02.176897 |
APIPark through 1.9.7-beta IDOR via application authorization endpoints
MEDIUM (5.3)
APIPark through 1.9.7-beta contains an insecure direct object reference vulnerability that allows authenticated users to read other applications' credentials by supplying a foreign authorization UUID. Attackers with authorization-view permission on one application can query /api/v1/app/authorization or its details route to retrieve plaintext API keys regardless of HideCredential.
Published: 2026-10-11T13:26:08.793Z
Updated: 2026-10-13T16:59:29.160Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111680 |
vulnerable | 2026-11-03 10:16:11.032221 |
APIPark through 1.9.7-beta Cross-Team Authorization Bypass via Team Query Parameter
HIGH (8.3)
APIPark through 1.9.7-beta contains an authorization bypass vulnerability that allows authenticated team managers to access other teams' services and applications by supplying their own team id in the team query parameter. Attackers can target service or app ids exposed by /api/v1/simple/services and /api/v1/simple/apps to read, modify, or delete other teams' services and applications via /api/v1/service/info and /api/v1/app endpoints.
Published: 2026-10-16T17:39:38.720Z
Updated: 2026-10-19T13:30:28.317Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.