Description
OpenPanel before 3.0.0 contains a missing authorization vulnerability that allows unauthenticated attackers to read any project's annotations by calling the public reference.getChartReferences tRPC procedure. Attackers can send requests with guessable slug-based project IDs to dump cross-tenant annotation titles, descriptions, and dates such as release notes and deploy markers.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Openpanel-dev openpanel
Default version status: unaffected
0 to < 3.0.0affected3.0.0unaffected
References
- https://github.com/Openpanel-dev/openpanel/security/advisories/GHSA-c98x-mph7-r6vp ↗
- https://github.com/Openpanel-dev/openpanel/commit/7b88523798dcd2dcba53c39ca00f8a8c448377c3 ↗
- https://github.com/Openpanel-dev/openpanel/security/advisories/GHSA-vrrm-p9p4-2gfg ↗
- https://www.vulncheck.com/advisories/openpanel-before-3.0.0-missing-authorization-via-reference-getchartreferences ↗