TI-2026-02865 CVE-2026-3321 · GHSA-pm7w-jqp9-2c3m
Authorization Bypass in ON24 Q&A chat
Priority MEDIUM 43
A vulnerability of authorization bypass through user-controlled key in the 'console-survey/api/v1/answer/{EVENTID}/{TIMESTAMP}/' endpoint.
ON24
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
ON24 records in CISA KEVNo ON24 vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2021-13814 CVE-2021-34823 · GHSA-ff42-ccp4-hwcv
The ON24 ScreenShare (aka DesktopScreenShare.app) plugin before 2.0 for macOS allows…
Priority MEDIUM 43
The ON24 ScreenShare (aka DesktopScreenShare.app) plugin before 2.0 for macOS allows remote file access via its built-in HTTP server.