Insecure Direct Object Reference (IDOR) in Negotiator v3.15.2 from Biobanking and Biomolecular Resources - European Research Infrastructure (BBMRI-ERIC).
CVSS 4.0MEDIUM 5.3·Network·Low privileges·No interaction·EPSS 0.0027·Published 2025-10-07·Fixed in 3.15.5CWE-639
Stored Cross-Site Scripting (XSS) in Biobanking and Biomolecular Resources Negotiator v3.15.2 - European Research Infrastructure (BBMRI-ERIC), consisting of a stored XSS due to a lack of proper validation of user input b…
CVSS 4.0MEDIUM 5.1·Network·Low privileges·User interaction·EPSS 0.00365·Published 2025-10-07·Fixed in 3.15.5CWE-79