Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: shaiwz Clear all filters
TI-2026-75482 CVE-2026-111696 · GHSA-jhvf-5wf6-hcgg

Hardcoded AES key exposes datasource passwords in data-platform-open

Priority LOW 31

data-platform-open through commit efeacd3 uses a hardcoded, publicly known default AES key in AesPasswordEncAndDecServiceImpl, allowing authenticated attackers to decrypt stored datasource passwords.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00304 Published 2026-10-16 No fix listed CWE-321
TI-2026-75481 CVE-2026-111695 · GHSA-m63w-xqgh-r8vr

Insecure direct object reference in Shaiwz data-platform-open

Priority MEDIUM 64

Shaiwz data-platform-open through commit efeacd3 contains an insecure direct object reference vulnerability that allows authenticated workspace members to access other workspaces' datasources by numeric id.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00335 Published 2026-10-16 No fix listed CWE-639