Depomo Chartbrew vulnerabilities
- chartbrew Chartbrew Cross-Tenant Template Export and Secret Disclosure in `GET /team/:team_id/template/generate/:project_id` 7.7 High
- chartbrew Chartbrew has SSRF in API Data Connection - No IP Validation on User-Provided URLs 7.8 High
- chartbrew Chartbrew: Stored Cross-Site Scripting (XSS) via File Upload API 6.3 Medium
- chartbrew Chartbrew: Unauthenticated Chart Filter Endpoint: POST /project/:project_id/chart/:chart_id/filter missing verifyToken + checkPermissions 8.7 High
- chartbrew Chartbrew: SQL injection in date-type variable handling (applyMysqlOrPostgresVariables) 8.8 High
- chartbrew Chartbrew: Remote Code Execution (RCE) via Vulnerable API 8.8 High
- chartbrew Chartbrew: Remote Code Execution (RCE) via MongoDB Dataset Query 7.2 High
- chartbrew Chartbrew: Insecure Direct Object Reference (IDOR) in Chart Operations 6.5 Medium