Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Lfprojects
Minder
Lfprojects Minder vulnerabilities
lfprojects
minder
`GetRepositoryByName`, `DeleteRepositoryByName` and `GetArtifactByName` allow access of arbitrary repositories in Minder by any authenticated user
CVE-2024-27916
Fix available
7.1
High
March 5, 2024
lfprojects
minder
Minder trusts client-provided mapping from repo name to upstream ID
CVE-2024-27093
Fix available
4.6
Medium
February 26, 2024
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open