CVE-2026-111614
mediumDataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticated users to read ot…
DataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticated users to read other users' datasources, snippets and dashboards by numeric id. Low-privileged attackers can enumerate auto-increment ids on the source, snippet and dashboard endpoints to retrieve serialized datasource host, port, username and cleartext passwords.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://github.com/devlive-community/MetaForge/blob/2025.1.1/core/datacap-server/src/main/... disclosure@vulncheck.com
- https://github.com/devlive-community/MetaForge/blob/2025.1.1/core/datacap-service/src/main... disclosure@vulncheck.com
- https://hackmd.io/@hieuPenguinnn/metaforge-datacap-source-getbyid-cross-user-idor disclosure@vulncheck.com
- https://www.vulncheck.com/advisories/datacap-through-2025.1.1-idor-via-basecontroller-geti... disclosure@vulncheck.com
- https://hackmd.io/@hieuPenguinnn/metaforge-datacap-source-getbyid-cross-user-idor 134c704f-9b21-4f2e-91b3-4a467353bcc0