Insecure direct object reference in DataCap exposes credentials
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-639.
Summary
DataCap through 2025.1.1 contains an insecure direct object reference in BaseController.getInfoForPath, tracked as CWE-639. An authenticated low-privileged user can enumerate numeric ids on the source, snippet and dashboard endpoints to read other users' datasources, snippets and dashboards. The exposed serialized datasource data includes host, port, username and cleartext passwords.
Written with Claude Haiku 5.5 from the sources below · 2026-10-28
Description from the CNA
DataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticated users to read other users' datasources, snippets and dashboards by numeric id. Low-privileged attackers can enumerate auto-increment ids on the source, snippet and dashboard endpoints to retrieve serialized datasource host, port, username and cleartext passwords.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| devlive-community | DataCap | up to 2025.1.1 | — | No fix listed | CNA |
- DataCap Vendordevlive-community Affected up to 2025.1.1 Fixed in — No fix listed CNA
Remediation
The sources list no fixed version for DataCap.
Written with Claude Haiku 5.5 from the sources below · 2026-10-28
Timeline
- 2026-10-16 Threatist record created from CVE-2026-111614
- 2026-10-16 Alias added: GHSA-pp2x-5mgr-8c5h
- 2026-10-18 Priority changed: MEDIUM → LOW
- 2026-10-21 CISA SSVC decision points changed
- 2026-10-21 Priority changed: LOW → MEDIUM
References
Other 2
- https://github.com/devlive-community/MetaForge/blob/2025.1.1/core/datacap-service/src/main/java/io/edurt/datacap/service/service/BaseService.java#L38-L43
- https://github.com/devlive-community/MetaForge/blob/2025.1.1/core/datacap-server/src/main/java/io/edurt/datacap/server/controller/BaseController.java#L91-L95
More devlive-community vulnerabilities
- TI-2026-83128 DataCap Privilege Escalation via allocationRole Missing Authorization CVSS 4.0HIGH 8.7
Sources
- CVE-2026-111614 · CVE Program
- CVE-2026-111614 · NVD
- FIRST EPSS
- GHSA-pp2x-5mgr-8c5h · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences